theme-factory
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed of static Markdown documentation and configuration files that define visual styles (hex colors and fonts).
- Evidence: Files in the themes/ directory contain only design specifications and no executable logic.
- [NO_CODE]: No source code or scripts were found in the skill package, significantly reducing the attack surface.
- Evidence: The skill lacks .py, .js, or .sh files, precluding direct code execution or dependency-based attacks.
- [PROMPT_INJECTION]: The skill allows for custom theme generation based on user descriptions, creating a surface for indirect instructions.
- Ingestion points: User-provided descriptions for custom theme creation mentioned in SKILL.md.
- Boundary markers: None specified in the instructions.
- Capability inventory: The skill implies the ability to modify artifacts (slides/docs), but provides no internal tools or scripts to perform these actions.
- Sanitization: No sanitization or validation of user-provided theme descriptions is mentioned.
Audit Metadata