operational-enterprise-ai
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains design instructions and a static HTML/CSS demo for creating landing pages. It does not involve any dangerous shell commands, network requests to untrusted domains, or access to sensitive local files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to generate product pages, representing a potential injection surface. Evidence chain: 1. Ingestion points: User prompts processed via the skill reference. 2. Boundary markers: The skill defines a structured visual system and page composition logic. 3. Capability inventory: Generation of static web content with minimal inline JavaScript. 4. Sanitization: Instructions include a 'Validate' section requiring the review of all metrics, quotes, and compliance statements against evidence, and the removal of unsupported claims.
Audit Metadata