visual-brand-extractor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include patterns to identify typography resources from well-known services.\n
- References Google Fonts via
fonts.googleapis.comfor typography analysis.\n - References Fontshare via
api.fontshare.comfor typography analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted HTML and CSS data from external websites, creating a surface for indirect prompt injection.\n - Ingestion points: WebFetch is used to retrieve full page content from external URLs as defined in the Phase 1 process of
SKILL.md.\n - Boundary markers: There are no explicit instructions to use delimiters or to ignore instructions that might be embedded in the fetched web content.\n
- Capability inventory: The skill has the capability to write the analysis results to local files in the
clients/directory.\n - Sanitization: The instructions do not specify any sanitization or filtering of the external content before it is processed by the agent.
Audit Metadata