save-as-standalone-html
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes and modifies external HTML, JavaScript, and CSS files from the workspace to resolve resource dependencies.
- Ingestion points: Step 1 requires reading the source HTML file and all project dependencies, including JSX and CSS-in-JS.
- Boundary markers: No delimiters or specific instructions are provided to help the agent distinguish between data and instructions within the ingested code.
- Capability inventory: The agent uses
super_inline_htmlto bundle assets andshow_htmlto execute the result for verification. - Sanitization: No sanitization or validation logic is defined for the external resources before they are processed.
- [DYNAMIC_EXECUTION]: The instructions direct the agent to execute the generated standalone HTML bundle in a webview environment.
- Evidence: Step 5 explicitly instructs the agent to "open the bundled output with show_html TO CHECK IT WORKS", which executes the bundled JavaScript and HTML in the local agent context.
Audit Metadata