gsap-react
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known packages
gsapand@gsap/reactfrom the official NPM registry. These are the expected industry-standard libraries for the stated purpose of the skill. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverified script downloads were detected. All code examples are static React components following official GreenSock guidelines.
- [COMMAND_EXECUTION]: The skill mentions standard package manager commands (
npm install) for installation, which are appropriate for a developer-oriented skill. - [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were found. The skill focuses entirely on UI animation logic.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a static documentation reference and does not define tools for ingesting or processing untrusted external data, posing no risk for indirect injection attacks.
Audit Metadata