space-wechat-layout
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided article content which acts as an ingestion point for potential indirect prompt injection.
- Ingestion points: User-supplied article text gathered in the first workflow step of
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when processing the article text.
- Capability inventory: The skill performs file system writes (
index.html) and can execute local build or development server commands. - Sanitization: The skill does not perform sanitization of the article content before rendering it into the preview layout.
- [DYNAMIC_EXECUTION]: The skill generates an HTML file with embedded JavaScript to handle clipboard operations.
- The generated script is derived from a safe template in
assets/static-preview-template.htmland a logic snippet inSKILL.md. - This behavior is essential to the skill's primary function of providing a copy-to-clipboard utility for WeChat editors.
Audit Metadata