journey-map
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates HTML files that load the D3.js library from the jsDelivr CDN (https://cdn.jsdelivr.net/npm/d3@7). This is a widely used and reputable source for web development libraries.\n- [DYNAMIC_EXECUTION]: The skill is primarily designed to generate HTML and JavaScript code from templates, which is the expected behavior for a visualization builder.\n- [INDIRECT_PROMPT_INJECTION]: The skill incorporates untrusted user data into generated interactive documents, which is a common vulnerability surface.\n
- Ingestion points: Journey content, steps, and descriptions provided by the user and processed by the agent according to instructions in SKILL.md.\n
- Boundary markers: None identified in the prompt instructions to the agent.\n
- Capability inventory: The skill writes HTML files containing user-derived data to the local file system.\n
- Sanitization: There are no instructions for the agent to sanitize or escape the user-provided text before embedding it into the generated JavaScript object, which could allow for injection if the files are viewed in a browser.
Audit Metadata