skills/umbraco/umbraco-cms-implementation-skills/umbraco-custom-maintenance-page/Gen Agent Trust Hub
umbraco-custom-maintenance-page
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and templates for Umbraco 17+ maintenance pages following official platform conventions.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses the risk of processing untrusted content by recommending that any editor-controlled text be HTML-encoded and baked into static files during a healthy deployment phase, rather than being queried live during an upgrade state. This mitigation follows the principle of least privilege by removing dependencies on the database and content cache when the application is in a vulnerable state.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch official documentation from Umbraco and Microsoft. These are trusted sources and the references are used for standard configuration guidance.
- [DATA_EXFILTRATION]: The polling scripts provided in the asset templates use relative paths or the same-origin
window.location.originto check a local readiness endpoint (/umbraco/api/health/ready). This is a benign and standard implementation to allow maintenance pages to automatically refresh once a site upgrade is complete.
Audit Metadata