typography-audit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze external 'rendered artifacts' (Section 2), creating an attack surface for indirect prompt injection if the content contains malicious instructions.
- Ingestion points: Section 2 mentions 'Access to the rendered artifact' including pages, components, and locales.
- Boundary markers: No specific delimiters or safety instructions are defined to separate data from instructions.
- Capability inventory: The skill does not define any executable tools, network operations, or file system modifications.
- Sanitization: No sanitization of ingested content is provided.
- [NO_CODE]: The skill is strictly instructional and does not include any scripts, binary files, or external code dependencies.
Audit Metadata