code-slice-hero
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a graphic component intended for rendering visual effects in a browser environment using WebGL 2 and GSAP. All scripts (
surface.js,shadows.js) are focused on mathematical calculations for 3D positioning and lighting. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data through the
headlineandreverseHeadlinevariables. This input is processed incode-slice-hero.html, where it is normalized and rendered to a 2D canvas to generate textures. The text is not used for agent instructions or command construction, and it is truncated to 32 characters to prevent large payload injections. - [EXTERNAL_DOWNLOADS]: The skill documentation references the
hyperframesCLI tool and HeyGen's official domains for preview assets. These are recognized as legitimate resources belonging to the skill's vendor and do not pose a security risk in this context.
Audit Metadata