page-decomposition
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [PROMPT_INJECTION] (SAFE): No instructions were found that attempt to override the agent's core safety protocols or extract system prompts.
- [DATA_EXFILTRATION] (SAFE): The skill does not perform network requests or access sensitive files like credentials or SSH keys.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes untrusted HTML content. While there are no explicit boundary markers or sanitization steps mentioned for the HTML input, the skill's restricted output (structured JSON descriptions) and lack of system-level capabilities minimize the risk of malicious instructions in the content being executed.
- [REMOTE_CODE_EXECUTION] (SAFE): There are no patterns involving remote script downloads, package installations, or dynamic code execution like eval().
Audit Metadata