video-hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Tailwind CSS via its official CDN and imports typography from Google Fonts. These are recognized, well-known services used for routine web development.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user content to populate the text fields of the generated HTML frames. This creates a surface for potential injection if the user content contains HTML tags designed to break out of the template structure.
- Ingestion points: User content is used to define the quantity of frames and the text content within each
<section>in the generatedindex.html. - Boundary markers: There are no specific delimiters or instructions provided to the agent to treat user input as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill generates browser-executable HTML, CSS, and JavaScript. The JavaScript is used to manage frame transitions and playback.
- Sanitization: The instructions do not specify any sanitization, escaping, or validation steps for the user-supplied text before it is interpolated into the HTML output.
Audit Metadata