svg-path-morphing

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and implementation examples for SVG path morphing without any suspicious instructions or hidden behavior.
  • [EXTERNAL_DOWNLOADS]: Fetches the flubber library from the well-known cdn.jsdelivr.net content delivery network, which is common for web-based development resources.
  • [COMMAND_EXECUTION]: Recommends standard npm install commands for installing development dependencies like flubber, path-data-parser, svg-path-commander, and gsap. These are legitimate packages used for path parsing and animation.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Processes SVG path strings within JavaScript recipes in SKILL.md and reference.md.
  • Boundary markers: Not applicable for these static code examples.
  • Capability inventory: Uses standard browser APIs like setAttribute, requestAnimationFrame, and document.querySelector to update the DOM.
  • Sanitization: The code performs numeric interpolation on path data; it does not process arbitrary instructions from the data. The skill also includes best practices by respecting the prefers-reduced-motion media query.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:48 PM
Security Audit — agent-trust-hub — svg-path-morphing