animation-design

Pass

Audited by Gen Agent Trust Hub on Jun 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform project automation tasks, including directory creation (mkdir), file management (cp, curl), and installing official animation libraries using npm install based on the detected project framework.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the LottieFiles GraphQL API to search for animation metadata and fetches .riv asset files from the Rive Marketplace. It also recommends installing official packages from the npm registry for React, Vue, and Svelte integration.
  • [DATA_EXFILTRATION]: Project metadata such as brand keywords and color palettes extracted from local files (DESIGN.md, CSS, and Tailwind configs) are used to construct search queries sent to the LottieFiles GraphQL endpoint and web search engines to locate brand-coherent assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 5, 2026, 09:22 PM
Security Audit — agent-trust-hub — animation-design