html-artifact
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes extensive use of well-known Content Delivery Networks (CDNs) including Google Fonts, jsDelivr, and Tailwind CSS to load various libraries like D3.js, Three.js, and Alpine.js at runtime.
- [COMMAND_EXECUTION]: Includes a Python script (
scripts/make-offline.py) and a PowerShell wrapper (scripts/make-offline.ps1) used to automate the process of downloading and inlining external CDN assets into local HTML files for offline use. - [DATA_EXFILTRATION]: The
make-offline.pyscript utilizes theurllib.requestlibrary to perform network operations, fetching remote content from URLs identified within HTML script and link tags. This network access is functionally aligned with the skill's primary purpose of artifact management. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes user-supplied data in CSV, JSON, and Markdown formats through various starters like
csv-viewer.htmlandjson-tree.html. - Boundary markers: Generally absent; data is interpolated into HTML templates via placeholder tokens.
- Capability inventory: The skill has the capability to write files to the current working directory and initiate network fetches via the provided helper scripts.
- Sanitization: Most templates and starters include client-side sanitization logic (e.g.,
escapeHtmlfunctions) to handle untrusted data rendering.
Audit Metadata