elite-css-animations
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes a recommendation to use an external polyfill script from 'https://flackr.github.io/scroll-timeline/dist/scroll-timeline.js' to enable support for the Scroll-Driven Animations API in browsers like Safari.
- [PROMPT_INJECTION]: The Vanilla SPA code example in 'references/view-transitions.md' identifies a potential indirect injection surface. Ingestion points: 'fetch(url)' retrieves content from external URLs. Boundary markers: Absent. Capability inventory: 'replaceWith(newContent)' updates the DOM. Sanitization: No explicit sanitization or escaping of the fetched HTML is performed in the provided code snippet.
- [SAFE]: The skill follows established security and performance best practices for web development. All animation examples include checks for the 'prefers-reduced-motion' media query, ensuring that users with motion sensitivities are protected. Documentation emphasizes animating compositor-only properties like transform and opacity to maintain high frame rates and avoid layout thrashing. No malicious command execution, data exfiltration, or obfuscation techniques were found in any of the skill files.
Audit Metadata