skills/egorfedorov/slot-casino-game-developer-skills-for-stake-engine/css-motion-designer/Gen Agent Trust Hub
css-motion-designer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides CSS-only motion recipes and design workflows for casino game UI. The CSS code blocks are standard and transparent, serving the stated purpose of defining animation systems.\n- [COMMAND_EXECUTION]: The skill includes a command for running a local Python validation script (
scripts/validate_css_motion_spec.py). This script uses standard library components to verify the integrity of motion specifications provided by the user and does not perform any sensitive network or system-level operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON files through its validation script, creating a data ingestion surface. However, the risk is negligible as the script focus is strictly on structural and type validation.\n - Ingestion points: The
validate_css_motion_spec.pyscript reads an external file path via the--inputargument.\n - Boundary markers: None provided for the content of the input JSON file.\n
- Capability inventory: The skill utilizes the validator to read local files and parse JSON; no network or write capabilities were identified.\n
- Sanitization: The script implements strict field and type checking against a contract defined in the
references/contracts.mdfile.
Audit Metadata