barba-spa-transitions
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages from the standard NPM registry (@barba/core, @barba/prefetch, @barba/head). These are well-known, widely used libraries in the web development community.
- [COMMAND_EXECUTION]: Provides standard developer commands for package management (npm install) and library initialization (barba.init). All commands are within the expected scope of a frontend development skill.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing HTML content fetched from different pages, it correctly identifies boundary markers like
data-barba-preventto control navigation and recommends manual focus management for accessibility. The surface for injection is limited to the application's own site content. - [SAFE]: The documentation includes robust advice on cleaning up event listeners and ScrollTrigger instances, which prevents performance degradation and potential memory leaks—a common pitfall in single-page applications.
Audit Metadata