brand-designer
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill defines React components that interpolate untrusted user data directly into SVG templates, which could be exploited to inject malicious text or SVG content.
- Ingestion points: File
references/templates.mdcontains components likeSocialPostandBusinessCardthat accept user-provided strings as props. - Boundary markers: The skill uses standard React JSX interpolation braces.
- Capability inventory: The skill is capable of local file system writes using the
sharplibrary as shown inreferences/asset-management.md. - Sanitization: There is no evidence of input validation, length limiting, or escaping for user-provided strings before they are rendered in the SVG templates.
Audit Metadata