moda-social-instagram
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources like user files and existing canvases to generate layouts.
- Ingestion points: Untrusted data enters the context through
moda file showandmoda canvas readcalls in the recreation and data preservation workflows described inreferences/design-quality.md. - Boundary markers: No explicit delimiter strings are used, but instructions command the agent to treat source data as canonical and copy it verbatim, serving as a procedural boundary.
- Capability inventory: The skill has capabilities to write to the canvas, delete items, and generate media across all scripts using the
modatoolset. - Sanitization: The skill includes strict rules against authoring new content or importing data from memory during the recreation process to prevent instruction following from source data.
- [DYNAMIC_EXECUTION]: The skill generates JavaScript for the
moda canvas edittool to perform bulk canvas updates as described inreferences/edit-code.md. - The scripts are generated based on provided templates to mutate node properties like color, position, and text.
- The execution is constrained to a synchronous sandbox that stubs out dangerous APIs like network access, file system access, and process manipulation.
Audit Metadata