wireframe-portal-title
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a visual rendering component that displays animated 3D text. It does not perform any sensitive operations, request elevated privileges, or attempt to exfiltrate data. The execution environment is limited to the browser canvas.
- [EXTERNAL_DOWNLOADS]: Fetches core libraries including GSAP, Three.js, and Clipper from the jsDelivr CDN to handle animations and geometry processing. These are well-known libraries from a standard content delivery network.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text for titles and phrases through runtime variables. While these inputs are unvalidated, they are used exclusively for visual rendering within the 3D scene and have no access to system capabilities or agent instructions.
- Ingestion points: Variables
title,replacementPhrase, andsubtitleinwireframe-portal-title.html. - Boundary markers: None present; the skill treats all input as display text.
- Capability inventory: No file system access, network requests, or subprocess execution capabilities are present in the rendering logic.
- Sanitization: Inputs are trimmed and converted to uppercase before being processed by the font loader.
Audit Metadata