lottie
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to load the
lottie-webanimation library from Cloudflare's cdnjs service. - [EXTERNAL_DOWNLOADS]: The skill provides examples for loading the
@lottiefiles/dotlottie-webplayer from the unpkg delivery network. - [COMMAND_EXECUTION]: The documentation suggests using
npx hyperframesto perform linting and validation of the animation compositions. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external animation assets (.json and .lottie files).
- Ingestion points: Animation data is loaded from local project paths such as
assets/logo-reveal.jsonandassets/product-flow.lottie(SKILL.md). - Boundary markers: None present for the asset content.
- Capability inventory: The skill uses third-party JavaScript libraries to parse and render animation data within a browser context.
- Sanitization: Relies on the built-in security and parsing logic of the
lottie-webanddotLottieplayer libraries.
Audit Metadata