web-animation-view-transitions
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No evidence of malicious code, persistence mechanisms, or unauthorized operations was detected in the skill instructions or scripts.
- [EXTERNAL_DOWNLOADS]: The skill metadata references a configuration schema from the vendor's official GitHub repository (agents-inc). This is a standard and neutral reference for validation purposes.
- [PROMPT_INJECTION]: The skill's examples include an indirect injection surface through insecure coding patterns. 1. Ingestion points: User-controlled data (e.g., user profiles, product data) processed in 'examples/core.md', 'examples/shared-elements.md', and 'examples/spa.md'. 2. Boundary markers: Absent. 3. Capability inventory: DOM manipulation using 'innerHTML' across multiple examples. 4. Sanitization: Absent. Several patterns demonstrate rendering data directly into the DOM without escaping, creating a potential Cross-Site Scripting (XSS) surface.
Audit Metadata