animation-flow
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files such as
package.jsonandtailwind.config.jsto automatically detect the target framework and styling configuration. - Ingestion points: Local project configuration files (
package.json,tailwind.config.*) and user-provided reference HTML or URLs when adding new templates. - Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded within the analyzed project files.
- Capability inventory: The skill generates and outputs executable component code (React, Vue, Svelte, or Vanilla JS) to be integrated into the user's project.
- Sanitization: The skill lacks explicit sanitization logic for content extracted from reference implementations provided by the user.
- [EXTERNAL_DOWNLOADS]: The
fixed-scrolltemplate references GSAP and its ScrollTrigger plugin via a well-known CDN (jsdelivr.net) for preview purposes. This is documented as a temporary measure, with instructions to install the library locally via standard package managers (npm, pnpm, yarn, bun) during the component conversion process.
Audit Metadata