svg
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational markdown files and code snippets. No malicious commands, data exfiltration patterns, or persistence mechanisms were detected. The skill author consistently provides security-conscious advice, particularly regarding the handling of untrusted SVG data and the use of sanitization tools.
- [INDIRECT_PROMPT_INJECTION]: The documentation discusses the risks associated with user-uploaded SVG files, which can contain active content like scripts. It provides clear mitigation strategies, including the use of DOMPurify for sanitization and the implementation of strict Content Security Policy (CSP) headers.
- [DYNAMIC_EXECUTION]: A JavaScript utility for generating SVG path data for smoothed corners (squircles) is included in
PATHS.md. This function is a deterministic mathematical generator used for visual styling and does not involve unsafe execution of untrusted input or network operations.
Audit Metadata