algorithmic-art
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references p5.js from a well-known CDN (Cloudflare) and utilizes Google Fonts for its interactive viewer template. These are standard practices for web-based generative art and originate from trusted service providers.
- [COMMAND_EXECUTION]: The skill does not contain any instructions to execute shell commands or system-level processes. All generated code is intended for browser-based execution within a sandboxed artifact environment.
- [PROMPT_INJECTION]: The skill uses stylistic instructions to nudge the agent toward an 'expert' tone, but these do not attempt to bypass safety filters, override system constraints, or extract system prompts.
- [DATA_EXFILTRATION]: No patterns for sensitive file access or unauthorized network requests were found. Network activity is limited to fetching legitimate library and font resources.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests user-provided 'conceptual seeds' and instructions to generate code.
- Ingestion points: User-provided art descriptions or conceptual references processed in
SKILL.md. - Boundary markers: None explicitly defined for user input interpolation.
- Capability inventory: Generates HTML and JavaScript artifacts for visualization.
- Sanitization: None specified; the skill relies on the agent's interpretation of creative concepts. However, this is consistent with the skill's primary purpose of creative code generation.
Audit Metadata