image-media-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational and implementation resources for front-end media handling. All code snippets follow standard web development practices.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines patterns for processing and rendering external content, which represents a standard attack surface (Category 8).
- Ingestion points: Data ingested via
InfiniteGalleryfetch functions,Avatarprops (name/src), andFileUploaderinteractions. - Boundary markers: Not explicitly defined in code templates as they are implementation-agnostic.
- Capability inventory: Restricts behavior to UI rendering, DOM manipulation, and standard file uploads to user-defined endpoints.
- Sanitization: Implementation recipes use React's built-in escaping for text interpolation, though raw JavaScript templates (e.g., in
InfiniteGallery) utilizeinnerHTMLwhich is a documented surface for XSS if input is not sanitized by the implementing developer. - [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted media services including Cloudflare, Vercel, Cloudinary, and imgix for image optimization and delivery, which is consistent with the skill's primary purpose.
Audit Metadata