vp-svg-art
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill instructions are focused entirely on the domain of SVG artwork creation and review.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing user-provided briefs and existing SVG assets. While this presents a theoretical injection surface common to all LLM-based tasks, the skill includes instructions for technical validation of XML structure and ID integrity. The risk is considered low as the agent acts as a producer/editor rather than an execution environment for the processed code.
- [DYNAMIC_CONTEXT_INJECTION]: No use of dynamic shell execution patterns (e.g.,
!commandsyntax) was found in the documentation. - [COMMAND_EXECUTION]: The skill does not instruct the agent to execute shell commands, scripts, or system utilities. It explicitly states in
references/modes-and-capabilities.mdthat no installation or external writes are authorized merely by loading the skill.
Audit Metadata