present
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches styling resources from Google Fonts, which is a well-known service.\n- [PROMPT_INJECTION]: The skill processes untrusted user data and interpolates it into HTML templates without sanitization, creating an indirect injection surface.\n
- Ingestion points: Content provided by the user for various types of presentations (lessons, reports, comparisons, roadmaps, dashboards) via the process defined in SKILL.md.\n
- Boundary markers: Absent; no delimiters or instructions to ignore embedded commands are used for external data.\n
- Capability inventory: The skill has the capability to write .html files to the local file system.\n
- Sanitization: Absent; the instructions do not specify any filtering or escaping of HTML tags from user-provided content.
Audit Metadata