SVG Animation Builder
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates HTML files that include references to the GSAP library and associated plugins from public Content Delivery Networks (CDNs).
- [COMMAND_EXECUTION]: Utilizes Puppeteer for rendering SVG animations and generating output formats like GIFs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied animation descriptions to generate GSAP timeline code and SVG structures. This creates a surface where the agent might interpret malicious instructions embedded within the user data.
- Ingestion points: User animation requests and SVG path descriptions as described in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are defined for processing external data.
- Capability inventory: Writing HTML/SVG files and executing Puppeteer for media conversion.
- Sanitization: No sanitization of the generated animation scripts or SVG elements is documented.
Audit Metadata