skills/nvlabs/skill2env/epic-design/Gen Agent Trust Hub

epic-design

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the GSAP animation library and the Lenis smooth-scrolling library from the jsDelivr CDN. These are well-known, trusted technology services used for legitimate web development.
  • [COMMAND_EXECUTION]: Provides local utility scripts (scripts/inspect-assets.py and scripts/validate-layers.js) for the agent to analyze image metadata and validate the generated HTML. These scripts perform static analysis and do not exhibit suspicious network or system operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data (image assets and HTML files). However, the scripts used for this processing perform non-executable analysis (Pillow-based metadata extraction and regex-based string matching), effectively mitigating risks of interpreting malicious instructions embedded in the data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 01:03 AM