building-react-quill-canvases
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates canvases that ingest and display data from PostHog queries, presenting an indirect prompt injection surface. Ingestion points:
ph.queryandph.loadInsightinreferences/starter-scaffold.mdandreferences/checklist-example.md. Boundary markers: Present; mandates the Quill design system. Capability inventory: Utilizesph.query,ph.actions.invoke,ph.tools.call, andph.state.set. Sanitization: Present; advises against raw HTML in markdown rendering.
Audit Metadata