frame-liquid-bg-hero
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Tailwind CSS (cdn.tailwindcss.com) and Google Fonts (fonts.googleapis.com) in its examples and instructions. These are well-known services and standard for front-end development.
- [DYNAMIC_EXECUTION]: The skill generates inline JavaScript or WebGL fragment shaders for animations. This dynamic code is produced by the AI to fulfill the template's visualization purpose and does not involve executing untrusted remote code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided titles and quotes to populate the background templates.
- Ingestion points: User input is used to fill the main text fields in example.html.
- Boundary markers: None identified.
- Capability inventory: Limited to browser-side rendering (HTML, CSS, JS). No subprocesses or network-send capabilities found in the skill's logic.
- Sanitization: No explicit sanitization logic is specified for the user-supplied strings.
Audit Metadata