find-animation-opportunities
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external repository content, which constitutes an attack surface for indirect prompt injection. However, it explicitly mitigates this risk in 'Hard Rule 4', which instructs the agent to treat repository content as data only, ignore steering attempts like 'ignore previous instructions', and flag them to the user.
- [COMMAND_EXECUTION]: While the skill analyzes code and suggests implementation details, it contains a strict 'Hard Rule' (Rule #1) prohibiting any modification of source code. It operates in a report-only mode.
- [SAFE]: No malicious patterns such as credential exfiltration, obfuscation, remote code execution, or unauthorized network operations were detected. The skill's behavior is consistent with its stated purpose of UI/UX auditing.
Audit Metadata