awwwards-site-anatomy

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily instructional, providing technical guidance and reusable code recipes for frontend development. No malicious patterns, obfuscation, or exfiltration attempts were detected.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing industry-standard packages from the NPM registry, including Next.js, React, GSAP, Three.js, and Lenis. These are well-known services and the references are documented neutrally for project setup.
  • [COMMAND_EXECUTION]: The skill lists standard package management commands (npm install) in its setup instructions. These are intended for the user to configure their local development environment and do not involve suspicious or unauthorized command execution.
  • [DYNAMIC_EXECUTION]: A code recipe in reference.md demonstrates client-side page transitions using fetch and innerHTML. While innerHTML is a known surface for XSS in web applications, it is presented here as a developer recipe rather than a capability for the agent to execute on untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:48 PM
Security Audit — agent-trust-hub — awwwards-site-anatomy