litestar-htmx

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external input from HTMX request headers, including HX-Prompt and JSON-encoded data in Triggering-Event. \n
  • Ingestion points: request.htmx.prompt and request.htmx.triggering_event in SKILL.md. \n
  • Boundary markers: None explicitly for these headers, but guidance suggests using standard template rendering. \n
  • Capability inventory: The skill is used to define route handlers that return HTML templates. \n
  • Sanitization: Explicit guardrail warns against returning unsanitized HTML and mandates the use of templates for escaping. \n- [EXTERNAL_DOWNLOADS]: References official software packages and repositories associated with the vendor and established projects. \n
  • Downloads/References: Fetches configuration and code from the official litestar-org GitHub organization and PyPI. \n
  • Dependencies: Mentions htmx.org and litestar-vite-plugin as required components for full integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 07:08 PM
Security Audit — agent-trust-hub — litestar-htmx