anass-pro-style
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches font assets from Google Fonts (
fonts.googleapis.comandfonts.gstatic.com), which is a well-known service. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted data (recipient names, professional facts, and roles) to generate personalized site content.
- Ingestion points: Defined in the 'Gather inputs' workflow in
SKILL.md. - Boundary markers: None present in the prompt templates.
- Capability inventory: The provided JavaScript files implement UI animations and canvas rendering but do not contain capabilities for file system modification, network exfiltration, or shell command execution.
- Sanitization: The instructions do not specify sanitization or escaping protocols for the gathered user data before it is interpolated into the HTML structure.
Audit Metadata