epic-design
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard animation and scroll-handling libraries (GSAP, ScrollTrigger, Lenis) sourced from the well-known jsDelivr CDN.
- [COMMAND_EXECUTION]: The skill instructions involve executing local Python (
scripts/inspect-assets.py) and Node.js (scripts/validate-layers.js) scripts. Analysis confirms these scripts perform legitimate development tasks, such as analyzing image transparency with Pillow and linting HTML structure, with no evidence of malicious intent or hidden operations. - [SAFE]: Detailed inspection of the 12 files reveals no patterns associated with data exfiltration, prompt injection, or obfuscation. The skill's logic is entirely consistent with its stated purpose of professional web design and animation.
- [METADATA_POISONING]: A discrepancy was noted between the author specified in the skill manifest ('Abbas Mir') and the author context provided in the environment ('alirezarezvani'). This is documented as a minor metadata inconsistency but does not present a security concern.
Audit Metadata