code-slice-hero

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements a visual animation block using WebGL 2 and the GSAP (GreenSock Animation Platform) library. The logic is focused on geometric calculations and texture rendering, with no evidence of malicious behavior or data exfiltration.
  • [EXTERNAL_DOWNLOADS]: The documentation references the installation and rendering of the hyperframes package from the npm registry via npx. This is the official CLI tool for the HyperFrames platform and is a legitimate vendor resource.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data through the headline and reverseHeadline variables to render text on the animation surface. The skill applies basic sanitization, including whitespace normalization and truncation to 32 characters. Since the skill environment is restricted to visual rendering and lacks access to sensitive APIs, network operations, or file system writes, this input surface does not present a significant security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:01 PM
Security Audit — agent-trust-hub — code-slice-hero