algorithmic-art

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill uses repetitive and forceful directives (e.g., "The philosophy MUST stress multiple times", "repeat phrases like 'meticulously crafted algorithm'") to force a deceptive persona. It explicitly instructs the AI to misrepresent its effort by claiming generated outputs resulted from "countless hours" and "master-level" expertise. (SKILL.md)
  • [PROMPT_INJECTION]: A vulnerability surface for indirect prompt injection exists. • Ingestion points: User-provided "conceptual seeds" and instructions are used as the foundation for the generated algorithm. (SKILL.md) • Boundary markers: No delimiters or warnings are used to isolate user input from the execution context. • Capability inventory: The skill generates and executes arbitrary p5.js code within an HTML artifact. (templates/viewer.html) • Sanitization: No validation or escaping is performed on user inputs before they are interpolated into the generated script.
  • [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches the p5.js library and typography from well-known service providers (Cloudflare CDN and Google Fonts) to support the interactive viewer's functionality. (templates/viewer.html)
  • [COMMAND_EXECUTION]: The skill implements a workflow that generates and executes dynamic JavaScript code based on a two-stage process where an intermediate "algorithmic philosophy" serves as the functional specification for the final artifact. (SKILL.md)
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 03:34 PM