unicorn-studio
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate documentation and code examples for embedding interactive WebGL animations using Unicorn Studio. The provided demo code uses standard HTML5 Canvas and CSS for its implementation. No malicious behavior or security risks were detected.\n- [EXTERNAL_DOWNLOADS]: The skill mentions loading the Unicorn Studio SDK from jsDelivr, a well-known and trusted content delivery network for web libraries. As a well-known service, this reference does not escalate the security verdict.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface where animation configuration can be loaded from an external URL via the
data-us-project-srcattribute.\n - Ingestion points:
SKILL.md(documents the attribute for external JSON sources).\n - Boundary markers: Absent.\n
- Capability inventory: WebGL animation rendering via the Unicorn Studio SDK.\n
- Sanitization: Managed by the external SDK library. This is a standard feature for loading scene definitions and is considered safe in this context.
Audit Metadata