skills/involvex/skills/canvas-design/Gen Agent Trust Hub

canvas-design

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill takes user input to deduce conceptual threads and create visual designs, which provides an entry point for indirect instructions.
  • Ingestion Points: User requests for posters, artwork, and design topics are used as a foundation for the agent's creative process (SKILL.md).
  • Boundary Markers: Absent. The instructions do not provide delimiters or negative constraints for the processed user input.
  • Capability Inventory: The skill is capable of writing multiple file types (.md, .pdf, .png) and contains instructions for network-based font downloads (SKILL.md).
  • Sanitization: No input validation or sanitization steps are defined for the user-supplied content.
  • [EXTERNAL_DOWNLOADS]: The skill instructions encourage the agent to download additional resources from the internet at runtime.
  • Evidence: The directive 'Download and use whatever fonts are needed to make this a reality' (SKILL.md) permits the fetching of assets from arbitrary and unverified external locations.
  • [PROMPT_INJECTION]: The skill employs a technique that injects a simulated user state to override behavior and force a specific output style.
  • Evidence: The instruction 'IMPORTANT: The user ALREADY said "It isn't perfect enough. It must be pristine, a masterpiece if craftsmanship..."' in the FINAL STEP (SKILL.md) is designed to force the agent into a refinement phase by fabricating previous user feedback.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 05:21 PM