motion-v13
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several legitimate third-party libraries including 'motion', 'react', 'next', 'react-window', 'react-virtuoso', and '@tanstack/react-virtual'. These are industry-standard packages in the React ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill defines UI templates for components like product cards and lists (e.g., in 'references/nextjs-integration.md') that ingest external data. While this technically represents a surface for indirect prompt injection, it is the intended primary purpose of the skill and the risk is minimal as the templates perform no privileged or dangerous operations with the data. 1. Ingestion points: Data arrays passed to components like AnimatedCard or lists in SKILL.md and its references. 2. Boundary markers: None explicitly provided in the snippets. 3. Capability inventory: Limited to UI rendering and CSS-based animations via the motion library. 4. Sanitization: Relies on standard React JSX escaping; no custom sanitization logic is present.
Audit Metadata