glass-shard-title
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a specialized 3D motion graphics composition for the HyperFrames platform. The implementation uses standard rendering techniques and browser-based animation libraries. No suspicious patterns or behaviors were found during the security review.
- [EXTERNAL_DOWNLOADS]: The composition fetches the GSAP (v3.14.2) and d3-delaunay (v6.0.4) libraries from the JSDelivr CDN, which is a well-known and trusted service for front-end development.
- [EXTERNAL_DOWNLOADS]: Static assets, including an HDR environment map and a matcap texture, are retrieved from the author's official domain (heygen.ai) and the associated CDN.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by accepting a user-provided 'headline' variable for rendering.
- Ingestion points: The 'headline' variable defined in SKILL.md and used in glass-shard-title.html.
- Boundary markers: None identified.
- Capability inventory: The data is processed by the Three.js and Canvas 2D APIs for visual rendering in assets/glass-main.mjs.
- Sanitization: Not applicable, as the input is used exclusively for text rasterization and visual display.
Audit Metadata