poster-hero
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches styling and typography from well-known services, specifically the Tailwind CSS CDN and Google Fonts. This is standard functionality for providing a consistent visual experience in HTML-based templates.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-supplied text to populate the poster template. While there are no specific boundary markers or sanitization logic defined in the instructions, the risk is considered safe because the skill does not possess capabilities that could be exploited by malicious input, such as file system writing, command execution, or network exfiltration.
- Ingestion points: User-provided marketing content described in the SKILL.md example prompt.
- Boundary markers: None identified.
- Capability inventory: The skill only performs text-to-HTML transformation for visual display; no subprocess execution or sensitive data access is present.
- Sanitization: None identified.
Audit Metadata