html-ppt-retro-quarterly-review
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the GSAP animation library from the JSDelivr CDN and typography from Google Fonts to provide visual styling for the generated presentation.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it reads an external DESIGN.md file and maps its contents into the CSS variables of the emitted HTML artifact. * Ingestion points: DESIGN.md * Boundary markers: Absent * Capability inventory: file_write (via artifact emission) * Sanitization: Absent
Audit Metadata