html-explainer

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure documentation practices. It explicitly instructs the model to use verbatim code snippets from the repository and to avoid generating code from memory, which reduces the risk of hallucinated or insecure code examples.
  • [SAFE]: The validate_explainer.py script is a localized utility that performs DOM-based structure checks (e.g., verifying titles, ensuring the file is self-contained, checking SVG presence). It does not perform network operations or access sensitive system paths.
  • [SAFE]: The skill documentation includes clear guidance on handling secrets and governed content by referencing a shared evidence contract, instructing the model to redact sensitive information rather than exposing it in the generated HTML.
  • [SAFE]: External resource usage is restricted to Google Fonts, ensuring the generated explainers are portable and self-contained without relying on potentially risky third-party scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 12:26 AM
Security Audit — agent-trust-hub — html-explainer