scroll-scrubbed-word-reveal
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a user interface utility designed for editorial text animation. It uses standard DOM manipulation techniques to wrap text in spans for animation purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text data via the
data-revealattribute or from within the DOM. The implementation indemo/index.htmlusesdocument.createTreeWalkerto isolate text nodes andtextContentto assign values to new spans. This approach safely handles content as raw text rather than HTML, preventing potential cross-site scripting (XSS) or structural injection from the input text. - [EXTERNAL_DOWNLOADS]: The documentation in
REFERENCES.mdlinks to the official GSAP (GreenSock) documentation. GSAP is a well-known and trusted animation service. No scripts are automatically downloaded or executed from this source during the skill's operation. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile does not contain any shell command injection patterns (!command).
Audit Metadata