css-animations

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends executing npx hyperframes, which causes the environment to fetch and run the hyperframes package from the public npm registry.
  • [COMMAND_EXECUTION]: The documentation specifies shell commands, specifically npx hyperframes lint and npx hyperframes validate, to be run as part of the development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The validation workflow creates an ingestion surface where external tools process user-provided markup and styles. 1. Ingestion points: User-authored HTML elements and CSS keyframe definitions. 2. Boundary markers: The skill does not define specific delimiters or instructions to prevent the processing of malicious content embedded in the CSS. 3. Capability inventory: The hyperframes tool performs analysis and validation on the provided code structure. 4. Sanitization: No explicit sanitization or validation logic is described for the inputs before they are passed to the validation command.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 04:31 PM