vfx-text-cursor
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from established external providers.
- Loads the Tailwind CSS framework from
cdn.tailwindcss.com. - Retrieves font assets from Google Fonts via
fonts.googleapis.com. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where external data is processed for rendering.
- Ingestion points: User-provided quotes and text strings are used to populate the visual components as defined in
SKILL.md. - Boundary markers: The prompt instructions lack explicit markers or instructions to isolate the user content from the rendering logic.
- Capability inventory: The skill produces HTML, CSS, and basic JavaScript for visual animations.
- Sanitization: The instructions do not specify validation or sanitization routines for the interpolated user content.
Audit Metadata