web-styling-theming
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for web theming that align with established frontend development best practices.
- [DATA_EXFILTRATION]: The skill patterns use localStorage and cookies to persist user theme preferences. This is a standard and localized use of storage for UI state and does not involve exfiltrating data to external domains.
- [DYNAMIC_EXECUTION]: The skill recommends using a synchronous inline script in the HTML head to apply theme attributes before the first paint. This technique is a standard performance optimization for theming; the script is self-contained and does not load or execute untrusted remote code.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a robust implementation example for validating cookie-based input against an allowlist before application, which proactively mitigates potential injection risks from untrusted storage sources.
Audit Metadata