theme-factory
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs for custom theme generation and references an external file (
theme-showcase.pdf) without specifying boundary markers or sanitization logic.\n - Ingestion points: User-provided descriptions for custom themes and the
theme-showcase.pdffile contents as referenced in SKILL.md.\n - Boundary markers: Absent. The instructions do not include delimiters or specific warnings to ignore embedded instructions within user-supplied text or external files.\n
- Capability inventory: The skill allows the agent to modify artifacts including slide decks, documents, and HTML landing pages.\n
- Sanitization: Absent. There are no instructions to validate, filter, or escape the content generated from user descriptions before it influences the agent's behavior.
Audit Metadata