hps-retro-tv
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches font files from Google Fonts (fonts.googleapis.com), which is a well-known and standard service for web typography.
- [PROMPT_INJECTION]: The skill is designed to ingest user-provided content to populate an HTML template. While this creates a surface for potential indirect prompt injection, the risk is minimal given the UI-focused scope.
- Ingestion points: User-provided story details are used to replace placeholders in example.html.
- Boundary markers: Absent in the provided template logic.
- Capability inventory: File system writing (fs:write) as defined in open-design.json.
- Sanitization: Not explicitly implemented in the provided skill scripts.
Audit Metadata