ripple
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a self-contained UI interaction using standard web technologies (HTML, CSS, and JavaScript). The JavaScript code in
ripple.jsandpreview.htmlis transparent and limited to DOM manipulation (createElement,appendChild,getBoundingClientRect) to create the visual ripple effect. No external network requests or suspicious API calls were detected. - [SAFE]: External references in
SKILL.mdandrecipe.motion.yamlpoint to the vendor's official GitHub repository (github.com/nexu-io). These links are informative and relate directly to the skill's documented purpose. - [SAFE]: No prompt injection, obfuscation, or persistence mechanisms were found. The use of
setIntervalin the preview code is a standard technique for looping a motion demonstration and does not trigger any malicious conditional logic.
Audit Metadata