awwwards-site-anatomy
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, providing technical guidance and reusable code recipes for frontend development. No malicious patterns, obfuscation, or exfiltration attempts were detected.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing industry-standard packages from the NPM registry, including Next.js, React, GSAP, Three.js, and Lenis. These are well-known services and the references are documented neutrally for project setup.
- [COMMAND_EXECUTION]: The skill lists standard package management commands (
npm install) in its setup instructions. These are intended for the user to configure their local development environment and do not involve suspicious or unauthorized command execution. - [DYNAMIC_EXECUTION]: A code recipe in
reference.mddemonstrates client-side page transitions usingfetchandinnerHTML. WhileinnerHTMLis a known surface for XSS in web applications, it is presented here as a developer recipe rather than a capability for the agent to execute on untrusted data.
Audit Metadata