page-designer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes natural language user requests for page designs, which constitutes a surface for indirect prompt injection. (1) Ingestion points: User prompts defined in SKILL.md for page purposes and content. (2) Boundary markers: No explicit delimiters or instructions are provided to isolate user input from system instructions. (3) Capability inventory: The skill is limited to generating text-based layout specifications; it does not utilize tools for file system modification, network communication, or shell command execution. (4) Sanitization: No input validation or filtering is performed.
- [NO_CODE]: The skill consists entirely of markdown documentation and reference materials (CSS tokens). No executable scripts, binaries, or configuration files for remote code execution were detected.
Audit Metadata