html-to-generateblocks
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML and CSS data provided by users to convert them into WordPress block format. This represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill accepts HTML/CSS layouts as input from the user (or potentially from external files/URLs if provided during a session).
- Boundary markers: The instructions do not specify any delimiters or safety markers (like XML tags or specific 'ignore instructions' warnings) to separate the data to be processed from agent instructions.
- Capability inventory: The skill instructs the agent to write output to files (e.g.,
{original-name}-converted.html), which involves filesystem write access. - Sanitization: There are no instructions for sanitizing or filtering the input data before processing, which could allow malicious instructions hidden in HTML comments or metadata to influence the agent's behavior during the conversion process.
Audit Metadata