product-demo-director
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides a standalone JavaScript code block (demo_lint.js) and instructs the user to execute it locally using Node.js to validate demo beats. This constitutes script generation and execution from a provided template.- [INDIRECT_PROMPT_INJECTION]: The linter script processes user-defined 'beats' data, creating a surface where untrusted data is interpolated into the script's logic.
- Ingestion points: The 'beats' array within the demo_lint.js code block in SKILL.md.
- Boundary markers: None present.
- Capability inventory: Limited to standard JavaScript logic and console output; no file system or network access.
- Sanitization: No input sanitization or escaping is performed on the data fields.
Audit Metadata