find-animation-opportunities
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted codebase files, creating a potential surface for indirect prompt injection.
- Ingestion points: Processes source code files (scripts, styles, UI components) throughout a repository.
- Boundary markers: The skill contains a specific 'Hard Rule' instructing the agent to treat repository content as data, not instructions, and to flag files containing injection attempts (e.g., 'ignore previous instructions').
- Capability inventory: The skill is strictly read-only and explicitly forbids modifying source code or executing external scripts.
- Sanitization: The agent is instructed to identify and bypass malicious text patterns within analyzed files.
- [SAFE]: No evidence of credential theft, remote code execution, persistence, or malicious network activity was found. The instructions prioritize restraint and security best practices.
Audit Metadata