html-debrief
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled shell script (
prepare.sh) to initialize the output directory and validate parameters. It also uses the system'sopencommand to launch the generated HTML report in a browser. Theslugparameter is strictly validated against a kebab-case regular expression, mitigating shell injection risks. - [EXTERNAL_DOWNLOADS]: The skill instructions and error messages reference an external dependency,
html-playground, providing instructions to install it from the author's GitHub repository (PaulRBerg/agent-skills). This is documented as a necessary component for the skill's template system. - [PROMPT_INJECTION]: The skill operates by ingesting data from the current task transcript to populate HTML reports. As it processes potentially untrusted external data, it presents a surface for indirect prompt injection, although instructions mandate that the agent verify all claims against verified tool evidence.
Audit Metadata