code-slice-hero
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a visual animation block using WebGL 2 and the GSAP (GreenSock Animation Platform) library. The logic is focused on geometric calculations and texture rendering, with no evidence of malicious behavior or data exfiltration.
- [EXTERNAL_DOWNLOADS]: The documentation references the installation and rendering of the
hyperframespackage from the npm registry vianpx. This is the official CLI tool for the HyperFrames platform and is a legitimate vendor resource. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data through the
headlineandreverseHeadlinevariables to render text on the animation surface. The skill applies basic sanitization, including whitespace normalization and truncation to 32 characters. Since the skill environment is restricted to visual rendering and lacks access to sensitive APIs, network operations, or file system writes, this input surface does not present a significant security risk.
Audit Metadata