css-animations
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends executing
npx hyperframes, which causes the environment to fetch and run thehyperframespackage from the public npm registry. - [COMMAND_EXECUTION]: The documentation specifies shell commands, specifically
npx hyperframes lintandnpx hyperframes validate, to be run as part of the development workflow. - [INDIRECT_PROMPT_INJECTION]: The validation workflow creates an ingestion surface where external tools process user-provided markup and styles. 1. Ingestion points: User-authored HTML elements and CSS keyframe definitions. 2. Boundary markers: The skill does not define specific delimiters or instructions to prevent the processing of malicious content embedded in the CSS. 3. Capability inventory: The
hyperframestool performs analysis and validation on the provided code structure. 4. Sanitization: No explicit sanitization or validation logic is described for the inputs before they are passed to the validation command.
Audit Metadata