html-ppt-retro-quarterly-review
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates external libraries and assets from well-known services to enhance the presentation's visual quality.
- Fetches the GSAP animation library from the JSDelivr CDN (cdn.jsdelivr.net) to handle wipe transitions and staggered reveals.
- Fetches typography assets from Google Fonts (fonts.googleapis.com and fonts.gstatic.com).
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template engine that processes user-provided data, creating a surface for indirect prompt injection.
- Ingestion points: The workflow instructions in SKILL.md state that the agent should read an active DESIGN.md file and adapt the copy/data based on user requests.
- Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill requires the
file_writecapability to output the finalized index.html artifact. - Sanitization: The references/checklist.md file provides a safeguard by requiring that no sandbox-hostile APIs (such as localStorage, alert, confirm, or prompt) are used in the generated output.
Audit Metadata