code-story
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes HTML templates that load resources from well-known external services.\n
- Typography is fetched from Google Fonts (fonts.googleapis.com) and the Mermaid.js library is loaded from the JSDelivr CDN (cdn.jsdelivr.net) in both references/example.html and references/template.html.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data which creates a vulnerability surface for indirect prompt injection.\n
- Ingestion points: The agent is instructed to read the user request, PR bodies, linked issues, and review comments to construct its narrative (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are mandated for the processing of these external inputs.\n
- Capability inventory: The agent has the capability to write to the scratchpad and publish HTML artifacts via the Artifact tool or the open command.\n
- Sanitization: The instructions do not provide for specific sanitization or filtering of external content before it is incorporated into the generated HTML output.
Audit Metadata