vfx-text-cursor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known services, specifically Tailwind CSS via its CDN and typography from Google Fonts. These are standard practices for web-based templates.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and render user-supplied quotes within an HTML/CSS structure, creating an injection surface.
- Ingestion points: User-provided text (quotes and metadata) in the prompt input, used in example.html.
- Boundary markers: Not explicitly defined in the template instructions.
- Capability inventory: HTML/CSS generation and rendering in a browser environment.
- Sanitization: The skill lacks explicit instructions for sanitizing or escaping the user-provided text before interpolation into the HTML output.
Audit Metadata