art-director

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches the Dagre graph layout library from the jsDelivr CDN (https://cdn.jsdelivr.net/npm/@dagrejs/dagre@1.1.8/dist/dagre.min.js) to render decision graphs.
  • [COMMAND_EXECUTION]: Uses basic shell commands like mkdir and cp for project initialization, and python3 -m http.server for local hosting of the generated visual previews.
  • [INDIRECT_PROMPT_INJECTION]: The skill incorporates external feedback and project files into the iteration loop. It includes mitigation instructions for the agent to produce "safe feedback summaries" and redact raw feedback logs before processing them.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 01:18 PM