gsap-react-router
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references GreenSock's official GitHub repository (github.com/greensock/gsap-skills) for supplementary animation skills. GreenSock is a recognized and established technology provider in the web development ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided repository content, such as layout files and navigation logic. This represents a potential surface for indirect prompt injection from untrusted codebases.
- Ingestion points: Reads repository instructions, existing animation code, layouts, and navigation logic from the user's project in SKILL.md.
- Boundary markers: Explicitly defines an "initialization contract" in initialization.md to manage the transition from pre-paint states to settled content.
- Capability inventory: The agent is empowered to modify React components, configure React Router routes, and implement complex GSAP animation timelines.
- Sanitization: Recommends using inline script markers for root attributes and providing no-JavaScript fallbacks to ensure content remains readable.
Audit Metadata