Skills
Navigate
skills/nicolasflores9/skills/joomla-frontend-integration/Gen Agent Trust Hub

joomla-frontend-integration

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides examples that fetch assets from well-known content delivery networks.\n
  • Evidence: references/01-joomla-asset-json-avanzado.json includes script references to code.jquery.com, cdn.jsdelivr.net, and analytics.google.com.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes code for Joomla modules and plugins that ingest external data, creating a potential vulnerability surface.\n
  • Ingestion points: references/02-modulo-testimonios-completo.php (module parameters via $params) and references/06-sp-page-builder-addon-plugin.php (addon parameters via $addon->params).\n
  • Boundary markers: Absent in the provided code templates.\n
  • Capability inventory: The PHP code renders these parameters directly into the webpage's HTML output.\n
  • Sanitization: While most fields use htmlspecialchars for escaping, the description field in the timeline addon example (references/06-sp-page-builder-addon-plugin.php) is rendered into HTML without escaping, which could allow for cross-site scripting (XSS) if the input is not sanitized.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 07:35 AM