svg-animation

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions and provides examples for using external animation libraries such as GSAP and Flubber, which are standard tools for vector motion.
  • [COMMAND_EXECUTION]: The documentation references the use of npx playwright to capture automated screenshots for animation verification and mentions local shell scripts (scripts/seek-shot.sh, scripts/contact-sheet.sh) for processing these assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to its handling of SVG and HTML content.
  • Ingestion points: The skill is designed to create, edit, and render SVG and HTML files within the agent's workspace.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are included in the documentation.
  • Capability inventory: The skill uses npx playwright (a browser execution environment) and shell scripts to process the generated assets.
  • Sanitization: The instructions do not specify any sanitization or filtering of the SVG/HTML content before it is rendered or processed.
  • Context: This surface is inherent to the primary purpose of the skill (vector animation and verification) and is used in a standard development workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 09:27 AM