motion-canvas
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Motion Canvas packages, including
@motion-canvas/core,@motion-canvas/2d,@motion-canvas/ui, and@motion-canvas/vite-plugin. These are standard, well-known packages for the library's functionality. - [COMMAND_EXECUTION]: The setup guide includes standard development shell commands for creating project directories, initializing npm projects, and running the Vite development server. All commands are routine for a TypeScript/Node.js project.
- [DYNAMIC_EXECUTION]: The skill documents a necessary architectural workaround using
createRequirein thevite.config.jsfile to allow the@motion-canvas/vite-plugin(distributed as CommonJS) to function within a modern ESM project. This is a standard and safe practice for addressing Node.js module interoperability. - [METADATA_POISONING]: The skill's metadata accurately reflects the purpose and content of the provided guide. The author field uses the name of the library being documented, which is a common practice for community-contributed educational skills and does not present a security risk.
Audit Metadata