scroll-snap-fullpage-deck
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill instructions and provided code snippets follow best practices for front-end development, focusing on native browser features like CSS scroll-snap and IntersectionObserver.
- [SAFE]: The JavaScript implementation is restricted to DOM manipulation, event handling, and history API usage for navigation and entrance animations. No evidence of obfuscation, remote code execution, or data exfiltration was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes 'aria-label' attributes from HTML sections in 'deck.js' to generate navigation labels. While this represents an ingestion point for untrusted data without explicit boundary markers or sanitization, it is evaluated as safe because the capability inventory is limited to UI updates and does not involve network or file system operations.
- [SAFE]: Automated checks in the evaluation file are limited to local file system inspection via 'grep' to verify the presence of required CSS and accessibility attributes.
Audit Metadata