animate
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied requests to generate animation code implementations.
- Ingestion points: The skill ingests user requests for motion, transitions, or component animations (SKILL.md).
- Boundary markers: The skill uses an "Initial Response" mechanism and a structured "Build Sequence" to guide the agent, but does not define explicit delimiters for untrusted user input.
- Capability inventory: The skill generates code for CSS transitions, CSS animations, the Web Animations API (WAAPI), and the Motion library, involving file-write operations (SKILL.md, RECIPES.md).
- Sanitization: No explicit sanitization or escaping of user input is specified in the instructions before the agent generates the code.
- [DYNAMIC_EXECUTION]: The skill generates script and style content at runtime based on user-provided parameters.
- Evidence: The "Build Sequence" in SKILL.md and the templates in RECIPES.md provide a framework for the agent to assemble and output CSS and JavaScript (React/Motion) code dynamically.
Audit Metadata