gfonts
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a CLI tool from the author's own NPM package and GitHub repository.
- [COMMAND_EXECUTION]: The installation and verification steps in SKILL.md involve executing shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill handles data from the Google Fonts registry and includes a command to download files, which creates an attack surface for instructions embedded in external metadata.
- Ingestion points: External font data is retrieved through the search, list, and info commands in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: The download command in SKILL.md allows the agent to write files to the local filesystem.
- Sanitization: No explicit sanitization or validation of retrieved data is described.
Audit Metadata