find-animation-opportunities
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is restricted to a read-only posture, meaning it only identifies and reports animation opportunities without the ability to modify source code, execute commands, or access the network. All identified patterns are for design analysis.
- [PROMPT_INJECTION]: A heuristic detection for 'PI_IGNORE_INSTRUCTIONS' was triggered; however, this is a false positive. The skill instructions contain a defensive rule explicitly telling the agent to treat repository content as data and to ignore any attempts within those files to override instructions. This follows security best practices for agents processing untrusted files.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted data (codebase files), the risk is minimal because the skill lacks dangerous tools (no file-write, no network, no eval). It further mitigates this by instructing the agent to flag and ignore steering attempts found in data.
Audit Metadata