flowchart
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML templates reference the FontAwesome library from the Cloudflare CDN (cdnjs.cloudflare.com), which is a trusted and well-known service for front-end assets.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided descriptions of concepts or processes to generate HTML and JavaScript code. 1. Ingestion points: User input enters the generation process during the initial identification step. 2. Boundary markers: The instructions do not mandate the use of delimiters to separate user data from the generation logic. 3. Capability inventory: The skill allows the agent to generate and save HTML files containing self-contained mathematical and visual logic. 4. Sanitization: There are no instructions for sanitizing or escaping user input before it is included in the generated output.
Audit Metadata