custom-cursor-systems
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and front-end JavaScript/CSS recipes for UI/UX enhancements. No evidence of malicious intent or security vulnerabilities was found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or unauthorized network operations were identified in the code snippets or documentation.
- [REMOTE_CODE_EXECUTION]: The code provided is designed for client-side browser execution and does not include any patterns for downloading or executing remote code or scripts.
- [OBFUSCATION]: The content is clear and readable. No hidden characters, encoded strings, or obfuscated URLs were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern that ingests data from HTML attributes (
data-cursor,data-cursor-text). However, the implementation uses safe DOM APIs (textContent) to display this data and does not possess any dangerous capabilities such as file system access or network communication that could be exploited via injection.
Audit Metadata