svg-path-morphing
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and implementation examples for SVG path morphing without any suspicious instructions or hidden behavior.
- [EXTERNAL_DOWNLOADS]: Fetches the
flubberlibrary from the well-knowncdn.jsdelivr.netcontent delivery network, which is common for web-based development resources. - [COMMAND_EXECUTION]: Recommends standard
npm installcommands for installing development dependencies likeflubber,path-data-parser,svg-path-commander, andgsap. These are legitimate packages used for path parsing and animation. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes SVG path strings within JavaScript recipes in
SKILL.mdandreference.md. - Boundary markers: Not applicable for these static code examples.
- Capability inventory: Uses standard browser APIs like
setAttribute,requestAnimationFrame, anddocument.querySelectorto update the DOM. - Sanitization: The code performs numeric interpolation on path data; it does not process arbitrary instructions from the data. The skill also includes best practices by respecting the
prefers-reduced-motionmedia query.
Audit Metadata