markstream-solid
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a Markdown renderer for SolidJS which processes dynamic content through a 'content' prop as seen in SKILL.md. While this creates an injection surface, it is consistent with the library's primary function. 1. Ingestion: 'props.content' in the Message component example. 2. Boundary markers: No specific delimiters or safety instructions are defined in the skill body. 3. Capability inventory: The renderer utilizes workers for complex KaTeX and Mermaid rendering. 4. Sanitization: The skill does not provide explicit instructions for sanitizing the input stream.
- [EXTERNAL_DOWNLOADS]: The skill references documentation, guides, and source code from the author's official web domain (simonhe.me) and GitHub repository (Simon-He95/markstream-vue).
- [DYNAMIC_EXECUTION]: The instructions describe setting up Web Workers (katexRenderer.worker and mermaidParser.worker) via Vite to handle specialized rendering tasks outside the main thread, which is a standard web development practice for performance.
Audit Metadata