sprite-animation
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external 'brief' and a 'DESIGN.md' file to generate HTML artifacts. This creates a surface where malicious instructions embedded in the design tokens or the topic brief could influence the generated output.
- Ingestion points:
DESIGN.md(Workflow Step 1) and the topic brief (Workflow Step 2). - Boundary markers: The instructions do not define delimiters or specific warnings to ignore embedded instructions in the ingested data.
- Capability inventory: The skill generates HTML and CSS (explicitly forbidding JavaScript) to be rendered by the agent/user.
- Sanitization: No sanitization or validation of the input strings is specified before interpolation into the artifact.
- [EXTERNAL_DOWNLOADS]: The skill's example implementation fetches web fonts from Google Fonts' official services (
fonts.googleapis.comandfonts.gstatic.com).
Audit Metadata