svg-animation

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands such as npx playwright and local helper scripts like scripts/seek-shot.sh to facilitate automated frame capture and verification of SVG animations.
  • [EXTERNAL_DOWNLOADS]: Documentation recommends incorporating external libraries like GSAP and Flubber from reputable public CDNs for complex animation tasks.
  • [SAFE]: Analysis of the skill body and reference materials revealed no evidence of prompt injection, data exfiltration, or obfuscated content. The skill emphasizes best practices like SVG optimization and accessibility. Potential indirect injection surface: 1. Ingestion: User-supplied SVG requests in SKILL.md. 2. Boundary markers: Absent. 3. Capability: Subprocess execution of Playwright and shell scripts. 4. Sanitization: Absent. The risk is minimal as it targets standard development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 09:22 AM
Security Audit — agent-trust-hub — svg-animation