frame-glitch-title
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The example HTML file loads the Tailwind CSS framework from
cdn.tailwindcss.comand web fonts fromfonts.googleapis.com. These are established, well-known services commonly used in web design and development. - [INDIRECT_PROMPT_INJECTION]: The skill functions by taking user-supplied titles and subtitles and rendering them within a specific CSS-driven glitch effect template.
- Ingestion points: User-provided text strings are interpolated into the
<h1>and<p>tags within the generated HTML. - Boundary markers: The template does not implement specific delimiters for user input, as it is designed for visual rendering rather than command execution.
- Capability inventory: The skill's primary function is generating a static HTML/CSS visualization. It does not possess capabilities for file system modification, network exfiltration, or shell command execution.
- Sanitization: The skill relies on the AI agent's inherent safety guardrails when generating the final HTML output based on user inputs.
Audit Metadata