editorial-burgundy-principles-template

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill instructions and checklist focus on maintaining design consistency and interaction logic. No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
  • [DATA_EXPOSURE]: No hardcoded credentials, API keys, or access to sensitive file paths (such as SSH keys or environment files) were found in the template or examples.
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts. The HTML artifacts are self-contained and do not include external script tags or remote dependencies.
  • [COMMAND_EXECUTION]: No shell commands, subprocess calls, or privilege escalation attempts (like sudo) were detected in the skill files.
  • [OBFUSCATION]: The code and instructions are provided in plain text. No Base64, zero-width characters, or homoglyph-based obfuscation techniques were identified.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests user input through the prompt to customize template content.
  • Boundary markers: The workflow in SKILL.md explicitly requires the agent to keep HTML self-contained and sandbox-safe.
  • Capability inventory: The skill uses file_write to emit an HTML artifact; the included JavaScript is limited to UI-side slide navigation using standard DOM APIs.
  • Sanitization: Content is processed by the agent into a static HTML structure, minimizing the risk of executable injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:48 AM
Security Audit — agent-trust-hub — editorial-burgundy-principles-template