eli5
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security-by-design by explicitly instructing the agent to 'Escape untrusted text' when generating the HTML artifact, which mitigates Cross-Site Scripting (XSS) risks stemming from the interpolation of user-provided arguments.
- [SAFE]: The instructions mandate the use of temporary directories (
mktemp) and isolated browser previews for verification, ensuring that the skill does not pollute the persistent file system or compromise the host environment during the generation process. - [SAFE]: The skill does not perform any network operations, access sensitive file paths, or attempt to install external dependencies, adhering to the principle of least privilege for its intended purpose.
Audit Metadata