frame-light-leak-cinema
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external resources for styling and typography, specifically the Tailwind CSS CDN (cdn.tailwindcss.com) and Google Fonts (fonts.googleapis.com). These are well-known services commonly used in web development and do not represent a security risk.
- [PROMPT_INJECTION]: The skill is designed to ingest user-provided content like titles and subtitles to populate an HTML template. This constitutes an indirect prompt injection surface where crafted input could affect the rendered output; however, the skill has no access to sensitive system tools, file operations, or network exfiltration, making this surface benign.
Audit Metadata