circular-text
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a decorative circular text animation using standard CSS and JavaScript. It contains no network operations, file system access, or hardcoded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to render animations. Ingestion points: Text is read from the
data-textattribute or element content incircular-text.js. Boundary markers: None present. Capability inventory: DOM manipulation and CSS transformations only; no network or file system access is requested. Sanitization: The skill usestextContentto inject characters into the DOM, which safely escapes HTML and prevents script execution.
Audit Metadata