editorial-burgundy-principles-template
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions and checklist focus on maintaining design consistency and interaction logic. No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or access to sensitive file paths (such as SSH keys or environment files) were found in the template or examples.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts. The HTML artifacts are self-contained and do not include external script tags or remote dependencies.
- [COMMAND_EXECUTION]: No shell commands, subprocess calls, or privilege escalation attempts (like sudo) were detected in the skill files.
- [OBFUSCATION]: The code and instructions are provided in plain text. No Base64, zero-width characters, or homoglyph-based obfuscation techniques were identified.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests user input through the prompt to customize template content.
- Boundary markers: The workflow in
SKILL.mdexplicitly requires the agent to keep HTML self-contained and sandbox-safe. - Capability inventory: The skill uses
file_writeto emit an HTML artifact; the included JavaScript is limited to UI-side slide navigation using standard DOM APIs. - Sanitization: Content is processed by the agent into a static HTML structure, minimizing the risk of executable injection.
Audit Metadata