cursor-reveal-hero
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a frontend UI component (cursor reveal canvas) using standard web APIs (Canvas 2D, Pointer Events). All logic is contained within local templates and scripts.
- [SAFE]: The validation script
scripts/smoke-check-reveal.mjsuses Playwright for browser testing. This is a standard development practice for canvas-based visual verification. The script is designed to run against local URLs (127.0.0.1) by default. - [SAFE]: The skill explicitly instructs the agent to keep image assets local and avoid adding analytics or third-party tracking unless requested by the user.
- [SAFE]: No obfuscation, data exfiltration, or persistence mechanisms were detected. Credential management instructions follow safety standards by recommending local development environment usage.
Audit Metadata