nanime
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing external or reactive data into the DOM through animation composables and components, creating a surface for indirect prompt injection if the source data is untrusted.
- Ingestion points: Dynamic data (e.g.,
track.value.title) and template refs are passed to animation tools such asuseScrambleText,useSplitText, and<AnimeTransitionGroup>(SKILL.md, references/layout.md, references/transitions.md). - Boundary markers: The documentation lacks guidance on using delimiters or instruction-isolation markers for the content being processed.
- Capability inventory: The library enables significant UI modifications including text scrambling, DOM restructuring, and SVG morphing (
#nanime/proxies/svg,useScrambleText). - Sanitization: There is no mention of sanitizing or escaping content before it is passed to the animation engine, which could lead to unintended UI manipulation if the input contains malicious instructions.
Audit Metadata