xyz-fade-up
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate user interface functionality using the AnimXYZ CSS library. The implementation follows standard web development practices for declarative animations.
- [EXTERNAL_DOWNLOADS]: The skill references the '@animxyz/core' library as a dependency, which is an established open-source CSS framework. No unverified or suspicious external scripts are downloaded or executed.
- [DATA_EXFILTRATION]: No network communication or sensitive data access was detected. The JavaScript included in the preview file is limited to local DOM manipulation for toggling animation states.
- [INDIRECT_PROMPT_INJECTION]: The skill processes specific animation attributes (xyz="...") as part of its primary function. This represents a minimal and low-risk attack surface that does not influence agent logic or bypass safety guardrails.
- [DYNAMIC_EXECUTION]: The use of 'setInterval' in the preview script is confined to a controlled demonstration of UI transitions and does not execute arbitrary or externally-provided code.
Audit Metadata