explain-via-html
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to fetch content from an external source to guide its output structure, creating a surface for indirect prompt injection.
- Ingestion points: External gallery and examples located at
thariqs.github.io/html-effectiveness/and its subdirectories. - Boundary markers: Absent. The skill directs the agent to "shape the output after that example's structure and interactivity" without isolating the fetched data or using delimiters to ignore embedded instructions.
- Capability inventory: The skill performs file system writes to the
html-expl/directory and executes theopenshell command. - Sanitization: Absent. The skill does not provide instructions to validate or sanitize the external HTML content before processing it.
- [EXTERNAL_DOWNLOADS]: The skill fetches structural templates and reference examples from
thariqs.github.io. Additionally, it references assets from well-known services, specificallycdn.jsdelivr.netfor the Mermaid library andfonts.googleapis.comfor typography. - [COMMAND_EXECUTION]: The skill uses the
opencommand to launch the system's default browser on newly created HTML files. While this is a standard operational step for the skill's purpose, it involves executing a shell command on files created by the agent.
Audit Metadata