transitions-dev
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local workspace content to provide animation audits and suggestions, creating a potential surface for indirect prompt injection. This is restricted to the skill's primary function of code analysis and lacks dangerous capability chains.
- Ingestion points: Workspace files (CSS, JSX, TSX) are read by the agent via the
transitions reviewandtransitions refinecommands. - Boundary markers: Not explicitly specified in the skill instructions.
- Capability inventory: File-write operations are performed during the
transitions applyphase to install snippets. - Sanitization: No explicit sanitization of workspace content is described.
- [SAFE]: The skill operates entirely on locally provided markdown files containing CSS and JavaScript snippets. It does not perform any remote network operations, data exfiltration, or external script downloads.
Audit Metadata