svg
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of comprehensive documentation and instructions focused on improving accessibility and security in projects using SVG graphics. It provides detailed guidance on preventing common SVG vulnerabilities, including script execution and XML External Entity (XXE) attacks.
- [NO_CODE]: No executable scripts, binaries, or automated deployment configurations are included in the skill. The content is strictly limited to Markdown instructions and YAML metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies that processing untrusted SVG content represents a security risk. It provides a detailed security section that mandates the use of SVG-aware sanitizers, resource limits, and secure XML parsing to mitigate potential injection or resource exhaustion attacks in the target application.
Audit Metadata