doc-kami-parchment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The template fetches styling and font resources from well-known services, including the Tailwind CSS CDN and Google Fonts API.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied text to fill its document templates, presenting a potential surface for indirect injection.
- Ingestion points: User content provided to the agent as specified in the skill instructions and example prompt.
- Boundary markers: No explicit delimiters are defined to isolate user content from formatting instructions.
- Capability inventory: The skill contains only static HTML and Markdown templates with no accompanying scripts, command execution, or network exfiltration capabilities.
- Sanitization: No input sanitization or validation is performed on the user-supplied content.
Audit Metadata