web-3d-motion-hero-by-aqq5ux
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external assets including videos, images, and source code documentation from
goodcase.aiandui.aceternity.comto serve as visual and structural anchors for design tasks. - [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to ingest and analyze external data from third-party websites using browser or media inspection tools, creating a potential attack surface for indirect prompt injection.
- Ingestion points: External URLs for finished media and original sources located in the
references/cases.mdfile. - Boundary markers: The skill includes instructions to provide a 'reference contract' and to distinguish between observed evidence and recommendations, which helps scope the agent's interpretation of external data.
- Capability inventory: The skill explicitly directs the agent to use 'available image, video, or browser tools' to inspect external content.
- Sanitization: There are no specific instructions for sanitizing or filtering content fetched from external sources before processing.
Audit Metadata