svg-animation
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as
npx playwrightand local helper scripts likescripts/seek-shot.shto facilitate automated frame capture and verification of SVG animations. - [EXTERNAL_DOWNLOADS]: Documentation recommends incorporating external libraries like GSAP and Flubber from reputable public CDNs for complex animation tasks.
- [SAFE]: Analysis of the skill body and reference materials revealed no evidence of prompt injection, data exfiltration, or obfuscated content. The skill emphasizes best practices like SVG optimization and accessibility. Potential indirect injection surface: 1. Ingestion: User-supplied SVG requests in SKILL.md. 2. Boundary markers: Absent. 3. Capability: Subprocess execution of Playwright and shell scripts. 4. Sanitization: Absent. The risk is minimal as it targets standard development workflows.
Audit Metadata