trip-email-html-itinerary
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to generate HTML content that references external CSS and font resources from Google's public APIs (fonts.googleapis.com). This is a well-known and standard practice for web typography.
- [PROMPT_INJECTION]: Because the skill is designed to ingest and process external data (user-pasted emails), it has an inherent surface for indirect prompt injection. The skill mitigates this risk by providing the agent with a strict extraction workflow and a fixed JSON trip model to follow before generating the final HTML.
- [SAFE]: The skill contains specific safety constraints that instruct the agent to never include sensitive authentication data, such as door codes or full credit card numbers, in the output. It also includes a validation checklist to ensure the resulting HTML file is self-contained and does not contain fabricated information.
Audit Metadata