cinematic-gsap-lenis-motion-system
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard setup instructions for installing industry-standard animation libraries using
npm i gsap lenis. - [INDIRECT_PROMPT_INJECTION]: The skill includes logic to process and transform text content from the DOM for animation purposes.
- Ingestion points: Text content is read from elements identified by
data-motion-textattributes inSKILL.md. - Boundary markers: Not present as the code processes existing page content for visual effects.
- Capability inventory: Includes DOM node creation (
document.createElement), text splitting, and GSAP timeline animations. - Sanitization: The implementation correctly uses
.textContentwhen creating new nodes, which prevents XSS vulnerabilities by treating input strictly as text.
Audit Metadata