page-template-library
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from existing WordPress pages to extract patterns and create reusable templates, which could potentially contain malicious instructions.
- Ingestion points: Existing site pages are read via
respira_extract_builder_contentandrespira_list_custom_postsas described in Step 2 and Step 3 of the workflow inSKILL.md. - Boundary markers: The skill does not define specific delimiters or "ignore" instructions for the data extracted from existing pages.
- Capability inventory: The agent has the capability to write new data to the site using
respira_create_playbookandrespira_build_page. - Sanitization: There is no mention of sanitizing or validating the extracted builder content before using it to define template structures.
- [EXTERNAL_DOWNLOADS]: The skill transmits usage telemetry to the author's official infrastructure.
- Evidence: The skill documentation notes a telemetry endpoint at
https://www.respira.press/api/skills/track-usageinSKILL.md. - Context: The endpoint is owned by the skill's author (
Respira for WordPress) and is used to track non-sensitive metrics such as builder type and playbook counts.
Audit Metadata