theme-factory
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The 'Create your Own Theme' feature in SKILL.md relies on user-provided descriptions to generate stylistic specifications, which presents a surface for indirect prompt injection.
- Ingestion points: User-supplied descriptions for custom themes within the 'Create your Own Theme' process (SKILL.md).
- Boundary markers: Absent; there are no instructions to the agent to use delimiters or ignore potentially malicious instructions embedded in the user text.
- Capability inventory: The skill's actions are restricted to reading local files from the 'themes/' directory and applying formatting to artifacts; it has no access to system commands, scripts, or network operations.
- Sanitization: Absent; the skill does not specify any validation, filtering, or sanitization of the user-provided theme descriptions.
- [NO_CODE]: The skill package consists entirely of Markdown and text files for documentation and theme definition. No executable scripts, binaries, or code files were detected.
Audit Metadata