carousel-instagram
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup instructions involve downloading the
playwrightpackage and the Chromium browser engine from official package registries. - [COMMAND_EXECUTION]: The skill requires executing shell commands for dependency installation (
npm install) and for the rendering process (node scripts/render.mjs). - [PROMPT_INJECTION]: The skill processes user-supplied text and image paths to generate HTML content, creating an indirect prompt injection surface. 1. Ingestion points: User-provided slide text and photo paths gathered during the workflow. 2. Boundary markers: No delimiters are specified to isolate user content within the generated HTML. 3. Capability inventory: The headless Chromium browser can access local files via
file://URLs and make network requests (e.g., loading fonts). 4. Sanitization: The instructions do not explicitly require the agent to sanitize or escape user-provided text before inserting it into the HTML templates.
Audit Metadata