theme-factory
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions allow for the generation of custom themes based on user-provided descriptions, which constitutes an ingestion point for untrusted data. 1. Ingestion points: User inputs for creating custom themes as described in SKILL.md. 2. Boundary markers: None present; the instructions do not provide specific delimiters to separate user input from agent instructions. 3. Capability inventory: The skill is limited to applying hex color codes and font names to artifacts. 4. Sanitization: None present; there are no instructions to sanitize or validate the user's descriptive input.
- [NO_CODE]: The skill contains no executable scripts, binaries, or platform-specific code. All files are markdown documents or text files containing metadata and instructions.
Audit Metadata