html-to-interaction-prompts
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML, CSS, and JavaScript from user-provided files and live URLs. This creates a surface for potential instructions embedded in the source code to influence the agent's behavior.
- Ingestion points: Analyzes local HTML files and external website content provided by the user.
- Boundary markers: No specific boundary markers or instructions to ignore embedded directives are required for processing the source content.
- Capability inventory: Possesses capabilities for file system writes, git operations, and network-enabled browser capture.
- Sanitization: Input code is not sanitized or filtered before analysis.
- [COMMAND_EXECUTION]: The skill uses local CLI tools for file verification and version control.
- Git usage: Employs
gitfor status checks, staging (includingadd -ffor assets), and committing. - Media verification: Uses
ffprobeto validate the readability of captured MP4 files. - Local serving: May launch a local server on
localhostto facilitate browser access to local HTML files. - [DATA_EXFILTRATION]: The skill performs network operations to visit and capture content from user-provided URLs.
- Network operations: Connects to external websites to record videos and take screenshots as part of its primary design documentation purpose.
Audit Metadata