card-twitter
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Tailwind CSS Play CDN (
cdn.tailwindcss.com) and Google Fonts (fonts.googleapis.com) to apply styling and typography to the generated HTML cards. Both are well-known services used for their intended UI purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided markdown and text content (e.g., quotes and author handles) to populate the card template. While this is an ingestion surface for external data, the risk is minimal as the output is restricted to visual rendering within a defined HTML structure.
- Ingestion points: User input or markdown files (referenced in
example.md). - Boundary markers: None explicitly defined in the provided files.
- Capability inventory: No file writing, network exfiltration, or shell execution capabilities were identified.
- Sanitization: The skill relies on standard HTML rendering.
Audit Metadata