svg-animations
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard animation libraries
framer-motionandgsap. These are legitimate and well-known packages commonly used for front-end development. - [INDIRECT_PROMPT_INJECTION]: The skill includes an
AnimatedBarChartcomponent that processes an externaldataarray to render SVG elements. This creates a surface for indirect prompt injection via data poisoning, although the risk is limited to visual rendering. - Ingestion points: Data array passed to
AnimatedBarChartinSKILL.md. - Boundary markers: Not present.
- Capability inventory: The skill only performs UI rendering and does not have access to sensitive file systems, network operations, or shell execution.
- Sanitization: The component uses standard numeric mapping for bar heights without explicit validation, which is typical for UI examples.
Audit Metadata