moodle5-theme

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The README documentation provides a command to install the skill from the author's repository using npx. This is a vendor-managed resource used for installation.\n- [COMMAND_EXECUTION]: The skill includes instructions for the agent to use Moodle CLI tools like purge_caches.php and build_theme_css.php for refreshing the theme environment during development.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it generates theme code based on user instructions. Ingestion points: User requests for theme modifications. Boundary markers: None specified for input interpolation. Capability inventory: Ability to generate and modify PHP and Mustache files. Sanitization: The skill instructs the agent to use Moodle's built-in validation parameters in the generated output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 12:04 PM