theme-factory
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and theme files contain only styling metadata (hex colors, font names) and design guidelines. No executable code, harmful commands, or unauthorized file access patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its interaction with untrusted artifacts and user-provided theme descriptions. 1. Ingestion points: External documents and custom theme inputs (SKILL.md). 2. Boundary markers: None identified. 3. Capability inventory: Modification and styling of artifacts (SKILL.md). 4. Sanitization: None identified.
Audit Metadata