stroke
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for frontend animation techniques. The provided code snippets focus on manipulating SVG path properties such as
stroke-dasharray,stroke-dashoffset, andstroke-widthusing standard Web APIs likerequestAnimationFrameand the Web Animations API. - [SAFE]: All external documentation links point to well-known and trusted technical standards and documentation sites, including the W3C Design Tokens Community Group and the Mozilla Developer Network (MDN).
- [SAFE]: The JavaScript implementations for effects such as handwritten simulation and ink drips use standard DOM manipulation techniques and do not involve remote code execution, unsafe deserialization, or network exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing SVG elements and text paths. While it handles external data (SVG attributes and text content), it does so using safe methods such as
textContentand standard SVG attribute getters/setters, posing no risk of prompt injection or cross-site scripting (XSS).
Audit Metadata