shaders-cursor-ripples
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or persistence mechanisms were found. The skill provides legitimate front-end development instructions for implementing visual effects.
- [EXTERNAL_DOWNLOADS]: The skill correctly specifies the 'shaders' package as a required dependency via standard npm installation. The library is used for its intended purpose of providing WebGPU shaders.
- [DATA_EXFILTRATION]: The React component includes the
disableTelemetryprop by default, which is a privacy-preserving measure that prevents the underlying library from potentially reporting usage data. - [INDIRECT_PROMPT_INJECTION]: The component ingests external data in the form of an
imageUrl. This data is passed directly to the rendering engine for visual display and does not pose a risk of instruction override or agent behavioral changes.
Audit Metadata