algorithmic-art
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches the p5.js library from cdnjs.cloudflare.com, which is a well-known and trusted Content Delivery Network.
- [PROMPT_INJECTION]: The skill exhibits an inherent surface for indirect prompt injection as it processes user input to derive artistic philosophies and generate executable JavaScript code. • Ingestion points: User-provided art concepts and parameter requests. • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic. • Capability inventory: The skill generates HTML and JavaScript artifacts that execute within the browser. • Sanitization: There is no evidence of input validation or sanitization prior to code generation.
Audit Metadata