moai-domain-svg-infographic
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/render.mjsexecutes a local Chromium-family browser (such as Google Chrome, Chromium, or Microsoft Edge) usingnode:child_process.spawnSync. This is used to render SVG source files into 2x PNG images. The script identifies the browser through environment variables, well-known installation paths, or the system PATH. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to the ingestion and rendering of user-controlled text.
- Ingestion points: User-supplied labels, titles, and captions are incorporated into SVG markup during the authoring process described in
SKILL.mdandreferences/archetypes.md. - Boundary markers: No explicit boundary markers or security instructions are used to separate user-provided text from the SVG structure.
- Capability inventory:
scripts/render.mjsexecutes a headless browser which processes the full SVG body to generate a screenshot. - Sanitization:
scripts/render.mjsstrips XML and DOCTYPE declarations, but the resulting SVG body is otherwise passed to the browser for rendering without further sanitization of potentially malicious SVG elements.
Audit Metadata