gsap-test
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate, production-focused recipes for testing GSAP animations. It correctly handles resource cleanup and media query simulation for accessibility testing.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a recipe demonstrating how to ingest untrusted data from the environment (URL query string) to facilitate animation debugging.
- Ingestion points:
window.location.searchinSKILL.md. - Boundary markers: None present in the code snippet; it relies on direct environment interaction.
- Capability inventory: The code can modify
gsap.globalTimeline.timeScaleto accelerate animations. - Sanitization: Uses a basic string inclusion check (
.includes('skip-animations')) without strict validation.
Audit Metadata