p5js
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill references established creative coding libraries (p5.js, p5.sound.js, CCapture.js, etc.) hosted on trusted Content Delivery Networks including Cloudflare (cdnjs), jsDelivr, and Unpkg. These are standard resources for web-based art production.
- [SAFE]: The utility scripts provided (
setup.sh,serve.sh,render.sh,export-frames.js) use standard tools such as Node.js, Puppeteer, Python's built-in HTTP server, and FFmpeg to perform their documented functions. These scripts are transparent and do not contain hidden or malicious commands. - [SAFE]: The headless rendering script (
export-frames.js) uses Puppeteer flags like--no-sandboxand--disable-web-security. While these reduce browser isolation, they are documented requirements for capturing high-resolution frames from local HTML files and do not represent a security risk within the context of the skill's intended use. - [SAFE]: Analysis of the skill instructions and metadata found no evidence of prompt injection attempts, obfuscated code, or unauthorized data access patterns.
Audit Metadata