unicorn-studio
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill describes loading a versioned JavaScript SDK from the jsDelivr CDN. This is standard behavior for web-integration skills and targets a well-known public content delivery network.
- [INDIRECT_PROMPT_INJECTION]: The skill includes placeholders for project identifiers and external JSON sources (data-us-project-src). While these are ingestion points for external content, they are necessary for the primary function of the skill (embedding animations). No automated or high-risk exploitation path was detected.
Audit Metadata