image-media-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational and implementation resources for front-end media handling. All code snippets follow standard web development practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines patterns for processing and rendering external content, which represents a standard attack surface (Category 8).
  • Ingestion points: Data ingested via InfiniteGallery fetch functions, Avatar props (name/src), and FileUploader interactions.
  • Boundary markers: Not explicitly defined in code templates as they are implementation-agnostic.
  • Capability inventory: Restricts behavior to UI rendering, DOM manipulation, and standard file uploads to user-defined endpoints.
  • Sanitization: Implementation recipes use React's built-in escaping for text interpolation, though raw JavaScript templates (e.g., in InfiniteGallery) utilize innerHTML which is a documented surface for XSS if input is not sanitized by the implementing developer.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted media services including Cloudflare, Vercel, Cloudinary, and imgix for image optimization and delivery, which is consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 07:32 AM
Security Audit — agent-trust-hub — image-media-patterns