authoring-motion-diagrams
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires running project-local scripts to validate and generate diagram assets.\n
- Evidence: The authoring flow in
SKILL.mdusesnode scripts/animations/render.js --check,node scripts/animations/preview.js, andnpm testto verify scenes.\n - Evidence: Documentation in
mechanic.mddescribes using headless Chrome for frame capture and FFmpeg for video encoding.\n\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests repository-local configuration data to guide its actions, which represents an attack surface for indirect injection.\n - Ingestion points: Step 1 of the flow in
SKILL.mdinstructs the agent to read plugin categories from.claude-plugin/marketplace.jsonand color tokens fromscripts/animations/palette.js.\n - Boundary markers: No explicit boundary markers or delimiters are defined for these data sources in the instructions.\n
- Capability inventory: The agent has capabilities for file system writes (SVG scenes) and execution of local Node.js scripts.\n
- Sanitization: The
render.js --checktool validates design constraints (like grid alignment and contrast) but does not provide security-focused sanitization of the input data.
Audit Metadata