molten-landing
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external HTML, CSS, and URL content during the audit workflow. Ingestion points: The skill reads local index.html and styles.css files and fetches data from remote URLs for analysis. Boundary markers: There are no explicit instructions for the agent to treat audited content as untrusted or to ignore embedded instructions. Capability inventory: The agent can execute a local Python script, read local files, and make network requests. Sanitization: The content is processed for metrics, but the raw text is accessible to the agent without specific sanitization against prompt injection.
- [COMMAND_EXECUTION]: The skill executes the included scripts/audit_metrics.py script via the command line to calculate page metrics.
- [EXTERNAL_DOWNLOADS]: The audit workflow fetches content from external URLs to evaluate landing pages, using Python's urllib module and browser tools.
Audit Metadata