html-explainer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure documentation practices. It explicitly instructs the model to use verbatim code snippets from the repository and to avoid generating code from memory, which reduces the risk of hallucinated or insecure code examples.
- [SAFE]: The
validate_explainer.pyscript is a localized utility that performs DOM-based structure checks (e.g., verifying titles, ensuring the file is self-contained, checking SVG presence). It does not perform network operations or access sensitive system paths. - [SAFE]: The skill documentation includes clear guidance on handling secrets and governed content by referencing a shared evidence contract, instructing the model to redact sensitive information rather than exposing it in the generated HTML.
- [SAFE]: External resource usage is restricted to Google Fonts, ensuring the generated explainers are portable and self-contained without relying on potentially risky third-party scripts.
Audit Metadata