svg-animation
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions and provides examples for using external animation libraries such as GSAP and Flubber, which are standard tools for vector motion.
- [COMMAND_EXECUTION]: The documentation references the use of
npx playwrightto capture automated screenshots for animation verification and mentions local shell scripts (scripts/seek-shot.sh,scripts/contact-sheet.sh) for processing these assets. - [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to its handling of SVG and HTML content.
- Ingestion points: The skill is designed to create, edit, and render SVG and HTML files within the agent's workspace.
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are included in the documentation.
- Capability inventory: The skill uses
npx playwright(a browser execution environment) and shell scripts to process the generated assets. - Sanitization: The instructions do not specify any sanitization or filtering of the SVG/HTML content before it is rendered or processed.
- Context: This surface is inherent to the primary purpose of the skill (vector animation and verification) and is used in a standard development workflow.
Audit Metadata