executive-course-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides UI design guidelines and a structural template for a course dashboard. It includes explicit instructions to avoid hardcoding credentials and relies on local JSON data for rendering, which is a secure design practice.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a data ingestion point via
data_ringkasan.json. This surface is assessed as safe because the skill has no dangerous capabilities such as network access, command execution, or file writing. * Ingestion points:data_ringkasan.jsonreferenced in SKILL.md. * Boundary markers: None explicitly mentioned in the instructional text. * Capability inventory: The skill is limited to 100% client-side HTML rendering with no shell or network access. * Sanitization: No explicit sanitization mentioned, but the data usage is restricted to UI display.
Audit Metadata