light-rays

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill provides a GPU-rendered fragment shader for background animations.
  • [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns found. The code operates entirely within the local browser context using standard WebGL APIs.
  • [REMOTE_CODE_EXECUTION]: No remote script downloads or piped command executions detected. The skill uses a local relative reference to _fx/shaderbg.js as specified in the implementation guidelines.
  • [OBFUSCATION]: No Base64, hex-encoding, zero-width characters, or homoglyph attacks identified. The GLSL shader code and JavaScript initialization logic are provided in plain text.
  • [INDIRECT_PROMPT_INJECTION]: The skill does not ingest untrusted external data or interpolate user-controlled variables into sensitive contexts. Its capabilities are restricted to rendering visual effects to the DOM.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 11:51 AM
Security Audit — agent-trust-hub — light-rays