vfx-text-cursor
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches visual styling components from Tailwind CSS's official CDN.- [EXTERNAL_DOWNLOADS]: Integrates typography from Google Fonts' official repositories.- [PROMPT_INJECTION]: The skill processes user-supplied text quotes to generate visual output. 1. Ingestion points: The gold sentence is ingested as a field in SKILL.md. 2. Boundary markers: No specific delimiters are used in the prompt instructions. 3. Capability inventory: The skill generates static HTML with CSS and simple JavaScript for preview rendering. 4. Sanitization: No explicit sanitization or filtering is mentioned for the processed text.- [COMMAND_EXECUTION]: The instructions describe generating standard JavaScript animation logic (e.g., setTimeout) to handle the word-by-word reveal effect.
Audit Metadata