fx-confetti
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard UI animation effect using JavaScript. Analysis of the source code confirms it only manipulates DOM elements and Canvas contexts for rendering confetti particles.
- [EXTERNAL_DOWNLOADS]: The skill contains references to its upstream source code and documentation on the author's official GitHub repository (
github.com/nexu-io/open-design). These references are consistent with the vendor identity and do not involve automated execution of remote scripts. - [INDIRECT_PROMPT_INJECTION]: The skill's attack surface is negligible as it only processes CSS variables from the host environment to determine color palettes. It has no capabilities for file writing, network exfiltration, or command execution, rendering it safe from injection-based exploitation.
Audit Metadata