stroke

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference for frontend animation techniques. The provided code snippets focus on manipulating SVG path properties such as stroke-dasharray, stroke-dashoffset, and stroke-width using standard Web APIs like requestAnimationFrame and the Web Animations API.
  • [SAFE]: All external documentation links point to well-known and trusted technical standards and documentation sites, including the W3C Design Tokens Community Group and the Mozilla Developer Network (MDN).
  • [SAFE]: The JavaScript implementations for effects such as handwritten simulation and ink drips use standard DOM manipulation techniques and do not involve remote code execution, unsafe deserialization, or network exfiltration.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing SVG elements and text paths. While it handles external data (SVG attributes and text content), it does so using safe methods such as textContent and standard SVG attribute getters/setters, posing no risk of prompt injection or cross-site scripting (XSS).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 06:08 AM