hero-webgl-shader-fullscreen
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates and instructions for building a WebGL-based hero section. No malicious patterns were detected in the provided code snippets.
- [DYNAMIC_EXECUTION]: The skill utilizes standard WebGL API calls (gl.compileShader and gl.linkProgram) to compile GLSL shaders at runtime from static strings. This is a legitimate and necessary operation for WebGL-based visual effects.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting user-controlled inputs (pointer coordinates and scroll position) via event listeners. However, these inputs are strictly normalized to numeric values and used only within the mathematical calculations of the fragment shader, preventing any ability to influence agent behavior.
Audit Metadata