image-trail
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a UI-focused image trail effect. The JavaScript code in
image-trail.jsis transparent and performs standard DOM operations for visual animations without requesting dangerous permissions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from HTML attributes to configure its behavior.
- Ingestion points: The
image-trail.jsfile reads values from thedata-imagesattribute on elements with the.trailclass. - Boundary markers: The script processes the attribute string directly without markers to distinguish data from potential instructions.
- Capability inventory: The script is limited to creating, animating, and removing
imgordivelements. It contains no subprocess calls, network requests, or file system operations across the codebase. - Sanitization: The input is split into an array and filtered for empty entries, but no URL validation or content sanitization is applied.
Audit Metadata