svg-stroke-reveal
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to external templates and interactive examples hosted on the author's GitHub repository and GitHub Pages (github.com/rheinmir/uiux-asset). These serve as reference assets for users to adapt into their projects.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific SVG data to apply animation effects. 1. Ingestion points: User-provided SVG path elements within the project files. 2. Boundary markers: None. 3. Capability inventory: DOM style manipulation (strokeDashoffset, strokeDasharray) and layout measurement (getTotalLength). 4. Sanitization: None.
- [SAFE]: The implementation relies entirely on vanilla JavaScript and CSS, avoiding third-party libraries. It includes logic to respect user motion settings and uses performance-efficient patterns like IntersectionObserver and requestAnimationFrame.
Audit Metadata