digits-fintech-swiss-template
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a template for processing user prompts into a slide deck, which is a standard ingestion surface.\n
- Ingestion points: User instructions are used to replace copy in template.html.\n
- Boundary markers: The output is strictly contained within an tag as defined in the output contract.\n
- Capability inventory: The skill uses the file_write capability to output the generated deck.\n
- Sanitization: The skill instructions in references/checklist.md explicitly mandate that no sandbox-hostile APIs such as localStorage, alert, or window.open be included in the output.\n- [SAFE]: The JavaScript used in the template is limited to local UI state management (slide transitions and keyboard event listeners) and does not involve any external network requests or sensitive file access.
Audit Metadata