aria-dialog-name
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by instructing the agent to ingest and analyze external, untrusted data (HTML markup and interactive components).
- Ingestion points: Instructions in
SKILL.mddirect the agent to review 'rendered markup' and 'interactive components'. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed code.
- Capability inventory: The skill contains no executable scripts, tool configurations, file-system access, or network capabilities. It is entirely instructional.
- Sanitization: No methods for sanitizing or escaping external content are provided.
Audit Metadata