geo-ai-citation-gallery
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
assets/template.htmlfile loads theChart.jslibrary fromcdn.jsdelivr.net. This is a well-known and trusted content delivery network used for hosting common open-source libraries. - [COMMAND_EXECUTION]: The
SKILL.mdfile provides documentation on how to publish the gallery using a bash script (publish_here.sh). This is presented as a standard deployment instruction for the user. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and display external video metadata (titles, descriptions, account names). The template includes an internal
escfunction to sanitize these strings before rendering them into the HTML document, effectively mitigating potential injection or XSS risks from untrusted data sources.
Audit Metadata