ornament-style-mono
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface within Step 1 and Step 2.
- Ingestion points: External data is ingested via
WebSearchandWebFetchwhen the agent researches historical periods or motif structures not present in the internal taxonomy (SKILL.md). - Boundary markers: The instructions lack delimiters or explicit warnings to the agent to ignore instructions embedded in the retrieved web content.
- Capability inventory: The skill possesses the capability to interact with the
mcp__hf-mcp-server__gr1_z_image_turbo_generateimage generation tool. - Sanitization: No sanitization, validation, or escaping of external content is performed before it is interpolated into the final generation prompt.
Audit Metadata