The Agent Skills Directory

[SAFE]: The skill provides a UI animation component using standard CSS and JavaScript. No malicious patterns, obfuscation, or unauthorized data access were detected.
[INDIRECT_PROMPT_INJECTION]: The skill processes text content from HTML elements tagged with the data-scroll-float attribute. The scroll-float.js script reads the textContent of these elements and wraps individual words in span tags. By using textContent instead of innerHTML, the skill safely handles the input text and prevents potential XSS or injection attacks from the data being animated.
[EXTERNAL_DOWNLOADS]: The skill is entirely self-contained. The provided preview.html only references local relative files (scroll-float.css and scroll-float.js). No external resources are downloaded or executed.
[REMOTE_CODE_EXECUTION]: The JavaScript logic is dependency-free and does not use eval(), Function(), or any other dynamic execution methods that could be exploited for remote code execution.

scroll-float