motion-canvas

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Motion Canvas packages, including @motion-canvas/core, @motion-canvas/2d, @motion-canvas/ui, and @motion-canvas/vite-plugin. These are standard, well-known packages for the library's functionality.
  • [COMMAND_EXECUTION]: The setup guide includes standard development shell commands for creating project directories, initializing npm projects, and running the Vite development server. All commands are routine for a TypeScript/Node.js project.
  • [DYNAMIC_EXECUTION]: The skill documents a necessary architectural workaround using createRequire in the vite.config.js file to allow the @motion-canvas/vite-plugin (distributed as CommonJS) to function within a modern ESM project. This is a standard and safe practice for addressing Node.js module interoperability.
  • [METADATA_POISONING]: The skill's metadata accurately reflects the purpose and content of the provided guide. The author field uses the name of the library being documented, which is a common practice for community-contributed educational skills and does not present a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 09:26 PM