html-artifact

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes extensive use of well-known Content Delivery Networks (CDNs) including Google Fonts, jsDelivr, and Tailwind CSS to load various libraries like D3.js, Three.js, and Alpine.js at runtime.
  • [COMMAND_EXECUTION]: Includes a Python script (scripts/make-offline.py) and a PowerShell wrapper (scripts/make-offline.ps1) used to automate the process of downloading and inlining external CDN assets into local HTML files for offline use.
  • [DATA_EXFILTRATION]: The make-offline.py script utilizes the urllib.request library to perform network operations, fetching remote content from URLs identified within HTML script and link tags. This network access is functionally aligned with the skill's primary purpose of artifact management.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill processes user-supplied data in CSV, JSON, and Markdown formats through various starters like csv-viewer.html and json-tree.html.
  • Boundary markers: Generally absent; data is interpolated into HTML templates via placeholder tokens.
  • Capability inventory: The skill has the capability to write files to the current working directory and initiate network fetches via the provided helper scripts.
  • Sanitization: Most templates and starters include client-side sanitization logic (e.g., escapeHtml functions) to handle untrusted data rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:27 PM