css-animations
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill primarily consists of CSS templates and instructional documentation.
- [DYNAMIC_EXECUTION]: The provided validation script (
scripts/validate.py) usesyaml.safe_load()to process configuration files, which is a recommended secure practice to prevent arbitrary code execution during deserialization. - [INDIRECT_PROMPT_INJECTION]: The skill defines clear parameter schemas for CSS generation. It does not have capabilities for network operations, sensitive file access, or command execution based on user input, which effectively isolates it from injection-based attacks.
- [COMMAND_EXECUTION]: No shell commands or subprocess calls were found in the skill's logic. The validation script uses standard library functions for local file system checks and is intended for development-time usage.
Audit Metadata