ogl-lightweight-webgl
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for the OGL library, focusing on WebGL visuals, shaders, and DOM-synced effects. It does not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill references the
oglpackage from the npm registry and provides a CDN link tojsdelivr.net(https://cdn.jsdelivr.net/npm/ogl@1.0.8/dist/ogl.mjs). These are well-known services and the references are used as intended for loading a legitimate library. - [COMMAND_EXECUTION]: Includes standard shell commands for package installation (
npm i ogl@1.0.8) which is routine for development skills and does not pose a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing DOM elements (images and videos) for WebGL textures, there is no surface for ingesting untrusted natural language data that could influence agent behavior. The attack surface is minimal and restricted to visual rendering.
Audit Metadata