dark-mode-testing
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external website content which could theoretically contain malicious instructions.
- Ingestion points: External websites loaded via
browser_navigateand inspected viabrowser_snapshot(SKILL.md). - Boundary markers: None identified between the browser's content and the agent's instructions.
- Capability inventory: Browser navigation, screenshot capture, and JavaScript execution within the browser context.
- Sanitization: No specific content sanitization is described for the external page data.
- [DYNAMIC_EXECUTION]: The skill uses JavaScript execution to toggle themes on the target page.
- The instructions provide specific snippets for class and attribute toggling (
classList.toggle('dark'),setAttribute('data-theme', 'dark')) which are executed within the browser's sandbox to manipulate the DOM for testing purposes.
Audit Metadata