canvas-design
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill uses a simulated user feedback technique by instructing the agent that 'The user ALREADY said "It isn't perfect enough. It must be pristine..."' to force a high-quality refinement loop.
- [EXTERNAL_DOWNLOADS]: Instructions encourage the agent to 'Download and use whatever fonts are needed,' which involves fetching external binary assets from unverified sources.
- [COMMAND_EXECUTION]: The workflow relies on the agent writing, executing, and iteratively polishing code to generate the final .pdf and .png visual artifacts.
- [SAFE]: The skill includes a 'canvas-fonts' directory containing numerous official SIL Open Font License files, supporting the legal use of typography in the design process.
Audit Metadata