gsap-tanstack-router

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository environment to perform code analysis and generation.
  • Ingestion points: The skill reads repository instructions, existing code (JS, TS, CSS), layouts, and documentation to provide context-aware animation assistance as specified in SKILL.md.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the ingested content are present.
  • Capability inventory: The skill is capable of generating and reviewing application code, interacting with file-system-based route configurations, and managing complex animation lifecycles as detailed across SKILL.md, motion-system.md, and tanstack-navigation.md.
  • Sanitization: There is no evidence of sanitization or filtering of the external content before it is processed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources for additional capabilities and documentation.
  • Evidence: SKILL.md recommends installing official GSAP skills from a repository under the greensock organization.
  • Context: These references target a well-known vendor in the web animation industry and are provided for legitimate functional extension.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:06 AM