animate-css
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied markup (HTML, React, WordPress) to inject animation classes and attributes. This represents a standard attack surface for indirect prompt injection where instructions could be hidden in comments or text of the input code. However, the skill provides specific guidance for the agent to select from a fixed list of animations, which serves as a natural constraint.
- [COMMAND_EXECUTION]: The skill does not execute any shell commands or system-level processes.
- [DATA_EXFILTRATION]: No network operations or access to sensitive local files (e.g., credentials, environment variables) were found.
- [SAFE]: The skill uses a bundled, well-known CSS library (Animate.css v4.1.1) and follows best practices for accessibility and performance by including support for IntersectionObserver and the prefers-reduced-motion media query.
Audit Metadata