text-to-lottie
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a Lottie project skeleton from the author's GitHub repository (
diffusionstudio/lottie) usingnpx degitas part of the initial environment setup. - [COMMAND_EXECUTION]: The workflow requires running standard developer commands, specifically
npm installandnpm run dev, to set up and host the local animation player environment. - [COMMAND_EXECUTION]: Uses a
nodeone-liner (node -e "JSON.parse(...)") to perform local validation of the generated Lottie JSON files, ensuring they are correctly formatted. - [SAFE]: The skill's file operations are restricted to the local
public/projects/directory, used for managing animation assets like JSON files, images, and fonts without accessing sensitive system locations.
Audit Metadata