gsap-react
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified. The skill's design emphasizes local execution for core tasks and requires explicit user confirmation before utilizing external capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a potential attack surface by ingesting data from external files and vendor-specific APIs (SandBase). However, the risk is mitigated by explicit quality gates requiring visual verification of outputs and strict boundary rules that limit the scope of external data processing.
- [EXTERNAL_DOWNLOADS]: The skill facilitates data retrieval from vendor-managed endpoints using the
sandbase_*tool suite. These operations are governed by transparent cost estimation and mandatory user approval workflows, ensuring the user remains in control of network activity and resource consumption.
Audit Metadata