html-ppt-zhangzara-mat
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill fetches typography from Google Fonts, which is a well-known and trusted service.
- [PROMPT_INJECTION]: The skill provides a mechanism for injecting user-supplied text into an HTML template to generate a presentation deck. While this constitutes an indirect prompt injection surface, it is the primary intended function of the template and does not process untrusted data from external sources.
- Ingestion points:
example.htmlplaceholders for headlines and body content. - Boundary markers: None present in the template or instructions.
- Capability inventory: Generation of HTML artifacts via the
<artifact>tag. - Sanitization: No explicit sanitization or encoding of user content is required by the instructions.
Audit Metadata