css-motion-designer

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides CSS-only motion recipes and design workflows for casino game UI. The CSS code blocks are standard and transparent, serving the stated purpose of defining animation systems.\n- [COMMAND_EXECUTION]: The skill includes a command for running a local Python validation script (scripts/validate_css_motion_spec.py). This script uses standard library components to verify the integrity of motion specifications provided by the user and does not perform any sensitive network or system-level operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON files through its validation script, creating a data ingestion surface. However, the risk is negligible as the script focus is strictly on structural and type validation.\n
  • Ingestion points: The validate_css_motion_spec.py script reads an external file path via the --input argument.\n
  • Boundary markers: None provided for the content of the input JSON file.\n
  • Capability inventory: The skill utilizes the validator to read local files and parse JSON; no network or write capabilities were identified.\n
  • Sanitization: The script implements strict field and type checking against a contract defined in the references/contracts.md file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:54 PM