css-transition-animation-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebase content (directories like
src/,app/, andpackages/) using search tools. This creates a surface for indirect prompt injection, as malicious instructions or deceptive comments within the analyzed files could potentially influence the agent's review logic or the remediations it suggests to the user.\n - Ingestion points: Codebase files are accessed and searched using
rg(ripgrep) commands defined inSKILL.md.\n - Boundary markers: The skill does not implement specific boundary markers or instructions to disregard embedded commands within the ingested codebase data.\n
- Capability inventory: The skill allows the agent to perform repository-wide searches and provide technical recommendations for code changes.\n
- Sanitization: No sanitization or filtering of the codebase content is performed before it is processed by the agent for analysis.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and source code examples from well-known and trusted sources, including MDN Web Docs, Google Chrome for Developers, and Adobe's GitHub repository. These references are used solely for informational purposes and best-practice guidance, and do not involve the automated download or execution of remote code.
Audit Metadata