art-director
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches the Dagre graph layout library from the jsDelivr CDN (https://cdn.jsdelivr.net/npm/@dagrejs/dagre@1.1.8/dist/dagre.min.js) to render decision graphs.
- [COMMAND_EXECUTION]: Uses basic shell commands like
mkdirandcpfor project initialization, andpython3 -m http.serverfor local hosting of the generated visual previews. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates external feedback and project files into the iteration loop. It includes mitigation instructions for the agent to produce "safe feedback summaries" and redact raw feedback logs before processing them.
Audit Metadata