canvas-design
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill includes a simulated user quote in the instructions:
The user ALREADY said "It isn't perfect enough. It must be pristine...". This is a technique used to override the agent's default interaction flow and force it into a mandatory refinement pass. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to
Download and use whatever fonts are needed to make this a reality. Fetching arbitrary assets from remote locations can be used as an attack vector if the source of the downloads is not strictly verified.
Audit Metadata