8-bit-orbit-video-template

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known external providers to enable styling and animation functionality.
  • Evidence: assets/template.html loads typography from Google Fonts (fonts.googleapis.com) and the GreenSock Animation Platform library from the jsDelivr CDN (cdn.jsdelivr.net). Both are established, well-known services.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest user-provided text for personalization into a generated HTML artifact.
  • Ingestion points: SKILL.md workflow Step 3 requires the agent to personalize titles, subtitles, and labels based on user input.
  • Boundary markers: The instructions do not specify the use of clear delimiters or "ignore embedded instructions" warnings for the user-supplied content during the generation process.
  • Capability inventory: The skill is intended to emit HTML artifacts, which involves the platform's file_write capabilities.
  • Sanitization: There are no explicit instructions to sanitize or escape the user-provided strings before they are interpolated into the artifact's code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 07:23 PM