framer-expert
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructional content and code examples for Framer design and Framer Motion animations. It does not contain any malicious code, obfuscated content, or persistence mechanisms. All examples follow standard web development practices.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data through an MCP server, which represents a potential injection surface. 1. Ingestion points: The skill retrieves Framer project structure, component code, and CMS content via MCP tools (SKILL.md). 2. Boundary markers: There are no specific instructions for the agent to use delimiters or ignore instructions found within retrieved project data. 3. Capability inventory: The skill's capabilities are focused on design analysis and code generation, with no access to high-risk tools like shell execution or unauthorized filesystem modification. 4. Sanitization: The skill lacks explicit instructions for validating or sanitizing external content retrieved through the MCP protocol.
Audit Metadata