litestar-htmx
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external input from HTMX request headers, including
HX-Promptand JSON-encoded data inTriggering-Event. \n - Ingestion points:
request.htmx.promptandrequest.htmx.triggering_eventinSKILL.md. \n - Boundary markers: None explicitly for these headers, but guidance suggests using standard template rendering. \n
- Capability inventory: The skill is used to define route handlers that return HTML templates. \n
- Sanitization: Explicit guardrail warns against returning unsanitized HTML and mandates the use of templates for escaping. \n- [EXTERNAL_DOWNLOADS]: References official software packages and repositories associated with the vendor and established projects. \n
- Downloads/References: Fetches configuration and code from the official
litestar-orgGitHub organization and PyPI. \n - Dependencies: Mentions
htmx.organdlitestar-vite-pluginas required components for full integration.
Audit Metadata