animation-composer
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-level orchestrator for animation tasks, providing guidance on tool selection (CSS, Framer Motion, GSAP, etc.) and performance best practices.
- [SAFE]: It references several well-known and trusted external libraries and repositories (e.g., GreenSock, Motion, Lottie, Rive, Theatre.js) for documentation and delegation purposes, which is standard for web development skills.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user animation requests which could theoretically contain instructions, but it lacks high-privilege capabilities like file-system writes or network exfiltration, making the surface low risk. Boundary markers are absent, but the skill's purpose is restricted to generating frontend code artifacts.
- [COMMAND_EXECUTION]: There are no shell commands, subprocess calls, or privilege escalation patterns present in the skill instructions or snippets.
- [DATA_EXPOSURE]: The skill does not access sensitive local file paths (like .ssh or .aws) or handle environment variables/credentials.
Audit Metadata