theme-factory
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The 'Create your Own Theme' feature in
SKILL.mdallows users to describe custom font and color combinations, which the agent then uses to generate a new theme. This process is vulnerable to indirect prompt injection (Category 8). - Ingestion points: User-provided descriptions for custom themes enter the agent's context during the generation process in
SKILL.md. - Boundary markers: The instructions lack explicit delimitation or 'ignore embedded instruction' warnings when the agent processes user input for new themes.
- Capability inventory: The skill reads existing theme definitions from the
themes/directory and is intended to modify or apply styles to other artifacts such as presentation decks and documents. - Sanitization: There is no evidence of sanitization or strict schema validation for the user-supplied styling requests.
Audit Metadata