broken-images
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on providing standard front-end development guidelines and templates to improve user experience and SEO by handling broken images.
- [COMMAND_EXECUTION]: The skill provides a Node.js script template (
scripts/check-images.js) for build-time validation. This script uses standard modules (fs,path, andglob) to check for the existence of local image files. This is a common, non-malicious utility used in CI/CD pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill involves scanning project files (HTML/CSS) to identify image paths. While the agent processes untrusted codebase content, the risk is mitigated as the skill only performs static analysis of file paths and suggests standard code fixes without executing external code found in those files.
- [DATA_EXFILTRATION]: The skill references a common pattern for monitoring client-side errors using
window.analytics. This is a standard telemetry practice for web applications and does not involve accessing sensitive system files or credentials.
Audit Metadata