8-bit-orbit-video-template
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known external providers to enable styling and animation functionality.
- Evidence:
assets/template.htmlloads typography from Google Fonts (fonts.googleapis.com) and the GreenSock Animation Platform library from the jsDelivr CDN (cdn.jsdelivr.net). Both are established, well-known services. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest user-provided text for personalization into a generated HTML artifact.
- Ingestion points:
SKILL.mdworkflow Step 3 requires the agent to personalize titles, subtitles, and labels based on user input. - Boundary markers: The instructions do not specify the use of clear delimiters or "ignore embedded instructions" warnings for the user-supplied content during the generation process.
- Capability inventory: The skill is intended to emit HTML artifacts, which involves the platform's
file_writecapabilities. - Sanitization: There are no explicit instructions to sanitize or escape the user-provided strings before they are interpolated into the artifact's code.
Audit Metadata