motion

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality documentation reference for the 'motion' React library. All documentation content and code examples are standard for web development and animation tasks.
  • [COMMAND_EXECUTION]: The maintenance script scripts/check-updates.py uses subprocess.run to execute a hardcoded command npm view motion version. This is a legitimate operation used to check for the latest package version on the official NPM registry and does not incorporate untrusted input or user-controlled data.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references official resources including the motion.dev website, GitHub repositories, and the NPM registry. These are well-known and standard services for the JavaScript ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — motion