gsap-awwwards-website
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a project template from a repository outside of trusted organizations.
- Source:
https://github.com/Eng0AI/gsap-awwwards-website-template.git. - [COMMAND_EXECUTION]: The skill executes multiple shell commands that involve external code execution and deployment operations.
npm install: Installs dependencies defined in the cloned repository'spackage.json.npm run build/npm run dev: Executes scripts from the external source.- Deployment: Uses
vercelandnetlifyCLI tools, including the use of an environment variable$VERCEL_TOKENfor authentication. - [INDIRECT_PROMPT_INJECTION]: By cloning and processing an external repository, the agent is exposed to untrusted data that could influence its behavior.
- Ingestion points: The entire contents of the cloned repository
Eng0AI/gsap-awwwards-website-template. - Boundary markers: None present to distinguish between the skill's instructions and the content of the cloned repository.
- Capability inventory: The skill has access to shell execution (
npm,git,vercel,netlify) and file system operations (rm -rf,mv). - Sanitization: No sanitization or validation of the external repository's content is performed before execution.
Audit Metadata