competition-template-render-path
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external web targets, such as HTML responses, hydration payloads, and route parameters. It lacks explicit boundary markers or instructions to ignore embedded commands within this processed data, which creates a surface for indirect prompt injection. However, the risk is minimized because the skill does not define any high-privilege capabilities like file system modifications or command execution.
- Ingestion points: Processes route params, SSR HTML, and hydration blobs as defined in
SKILL.md(Workflow) andreferences/template-render-path.md. - Boundary markers: None identified in the instructions or reference materials.
- Capability inventory: No subprocess calls, file-write operations, or network requests are present in the provided skill files.
- Sanitization: No escaping or validation of external content is specified.
Audit Metadata