designing-canvas-art

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill processes user input to deduce conceptual themes for art creation, representing a standard surface for indirect prompt injection.
  • Ingestion points: User instructions are ingested as the foundation for creative work in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within user input.
  • Capability inventory: The skill performs local file writes (.png, .pdf, .md) and executes Python-based rendering scripts.
  • Sanitization: No explicit sanitization or validation of conceptual content derived from user input is performed.
  • [EXTERNAL_DOWNLOADS]: The skill references several open-source font repositories and their licenses. These are well-known resources from trusted platforms used legitimately for typographic purposes.
  • [COMMAND_EXECUTION]: Technical instructions involve executing Python code to utilize libraries like cairosvg and reportlab. This is a functional requirement for the skill's primary purpose of rendering visual outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 11:03 AM
Security Audit — agent-trust-hub — designing-canvas-art