social-reddit-card
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's example code fetches the Tailwind CSS library and Google Fonts from their respective official CDNs. These are well-known, established technology services commonly used for web development and do not present a security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill is built to ingest user-provided text for populating card templates. This is its intended primary function. The instructions help mitigate injection risks by explicitly forbidding external image links, which prevents common vectors like tracking pixels or external asset manipulation.
Audit Metadata