homepage-rewrite
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external URLs, creating a standard surface for indirect prompt injection.\n
- Ingestion points: SKILL.md (Step 1) utilizes web tools to fetch content from user-provided URLs for analysis.\n
- Boundary markers: The skill does not explicitly define delimiters or instruction-ignore markers for the ingested content.\n
- Capability inventory: Capabilities are restricted to local file operations (reading reference files and writing reports). It does not perform shell execution or network exfiltration of ingested data.\n
- Sanitization: No specific validation or sanitization of external text is performed before it is used for copy generation.
Audit Metadata