theme-factory
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided descriptions to generate custom visual themes. While this creates a theoretical surface for indirect prompt injection where a user could attempt to influence agent behavior through theme descriptions, the impact is limited to visual styling and the functionality is legitimate.
- Ingestion points: User-provided inputs for custom theme generation (SKILL.md).
- Boundary markers: None defined for the custom theme generation prompt.
- Capability inventory: Applying styles to artifacts (slides, docs, HTML), which involves content modification.
- Sanitization: No explicit sanitization of user-provided theme descriptions mentioned.
Audit Metadata