to-spring-or-not-to-spring
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions provide a comprehensive set of rules for auditing animation code (React/Framer Motion and CSS). It uses clear, instructional language without any signs of prompt injection or attempts to bypass safety filters.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external code files. While this creates a potential surface for indirect prompt injection if the files being audited contain malicious instructions, this risk is inherent to any code-auditing tool. The skill does not possess capabilities that would allow for data exfiltration or system modification based on audited content.
- Ingestion points: User-provided source code files (SKILL.md).
- Boundary markers: None explicitly defined.
- Capability inventory: The skill is restricted to outputting audit findings in a specific
file:lineformat; no file writing, network operations, or shell command execution capabilities are present. - Sanitization: No specific input sanitization is mentioned, but the output format is highly constrained.
Audit Metadata