gsap-awwwards-website

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a project template from a repository outside of trusted organizations.
  • Source: https://github.com/Eng0AI/gsap-awwwards-website-template.git.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands that involve external code execution and deployment operations.
  • npm install: Installs dependencies defined in the cloned repository's package.json.
  • npm run build / npm run dev: Executes scripts from the external source.
  • Deployment: Uses vercel and netlify CLI tools, including the use of an environment variable $VERCEL_TOKEN for authentication.
  • [INDIRECT_PROMPT_INJECTION]: By cloning and processing an external repository, the agent is exposed to untrusted data that could influence its behavior.
  • Ingestion points: The entire contents of the cloned repository Eng0AI/gsap-awwwards-website-template.
  • Boundary markers: None present to distinguish between the skill's instructions and the content of the cloned repository.
  • Capability inventory: The skill has access to shell execution (npm, git, vercel, netlify) and file system operations (rm -rf, mv).
  • Sanitization: No sanitization or validation of the external repository's content is performed before execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 12:53 PM