infocard

Pass

Audited by Gen Agent Trust Hub on Apr 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of instructional Markdown and HTML/CSS templates. There are no scripts, binaries, or configuration files that execute commands or perform system-level operations.
  • [SAFE]: No prompt injection or behavioral override patterns were detected. The 'Critical Rules' provided are stylistic and structural guidelines intended to ensure high-quality visual output.
  • [SAFE]: Data exposure and exfiltration check: No hardcoded credentials, sensitive file paths, or network calls (such as curl or wget) were found in the 61 files analyzed.
  • [SAFE]: The skill uses standard web technologies (HTML5, CSS3) and references common web fonts. No obfuscation techniques, such as Base64 encoding of commands or hidden Unicode characters, were identified.
  • [SAFE]: While the skill is designed to process user-provided content to generate cards (Indirect Prompt Injection surface), it does not grant the agent any dangerous tools or permissions that could be exploited through such an injection. It is a purely presentational utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 24, 2026, 05:32 AM