with-svg-animation

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing user-provided SVG markup and path data to diagnose animation issues. This constitutes a data ingestion surface. \n
  • Ingestion points: SVG path data and XML markup provided by the user (SKILL.md).\n
  • Boundary markers: None identified.\n
  • Capability inventory: The skill provides logic for generating CSS and JavaScript code; no restricted tools or subprocesses are invoked by the skill itself.\n
  • Sanitization: No explicit sanitization or validation of the input SVG data is mentioned.\n- [SAFE]: The skill focuses on technical animation best practices, including accessibility (prefers-reduced-motion) and performance considerations (avoiding main-thread jank). It correctly warns against using licensed plugins (GSAP DrawSVG/MorphSVG) without verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:24 PM
Security Audit — agent-trust-hub — with-svg-animation