anima-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides implementation examples using the
@google-cloud/secret-managerNode.js package for secure credential storage. - [INDIRECT_PROMPT_INJECTION]: The workflow described involves processing external Figma file content and node data, representing a potential ingestion surface for untrusted content.
- Ingestion points: Figma API (reading file content and node IDs referenced in SKILL.md).
- Boundary markers: No explicit delimiters for external data are specified in the provided templates.
- Capability inventory: The skill environment allows Read, Write, Edit, and Grep operations.
- Sanitization: No explicit sanitization or filtering of Figma design data is detailed in the instructions.
Audit Metadata