card-twitter
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard web technologies to fulfill its stated purpose of card generation. No malicious command execution, data exfiltration, or obfuscation was detected.
- [PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it processes user-provided content to generate cards.
- Ingestion points: User-provided quotes, author names, and handles in the
SKILL.mdandexample.htmlfiles. - Boundary markers: None explicitly defined for interpolating user data into the template.
- Capability inventory: Uses the
fs:writecapability to output generated HTML/artifacts. - Sanitization: No specific sanitization or validation of user-provided content is performed by the skill instructions.
- [EXTERNAL_DOWNLOADS]: Fetches styles and fonts from well-known and trusted services, including the Tailwind CSS CDN and Google Fonts.
Audit Metadata