team-motion-design
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill reads local files such as CSS, JS, and project documentation to audit existing animations. This content is processed without sanitization or boundary markers, which could allow instructions hidden in the codebase to influence agent behavior.
- Ingestion points:
roles/motion-researcher/role.mdandroles/animator/role.mdread codebase content viaGlobandGrep. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the scripts when processing external files.
- Capability inventory: The agents have access to powerful tools including
Bash,Write,Edit,Agentspawning, andmcp__chrome-devtools__evaluate_script. - Sanitization: No sanitization is performed on ingested codebase content before it is processed by the LLM.
- [COMMAND_EXECUTION]: Dynamic Code Generation. The
animatorrole generates JavaScript orchestrators and CSS animations at runtime based on choreography specifications. These are subsequently utilized by themotion-testerrole, which executes scripts via themcp__chrome-devtools__evaluate_scripttool to validate performance, representing a surface for dynamic code execution within the browser environment.
Audit Metadata