lottie-bodymovin
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The content is focused on providing technical documentation and code examples for user interface animations using the Lottie framework.
- [EXTERNAL_DOWNLOADS]: Integration with the
lottie-reactlibrary is documented for animation rendering. This is a standard npm package for web development. - [DYNAMIC_EXECUTION]: The skill provides examples of After Effects expressions. These are interpreted by the Lottie player at runtime to drive animation logic, representing a controlled form of dynamic execution within the animation engine.
- [INDIRECT_PROMPT_INJECTION]: Analysis of data ingestion surface:
- Ingestion points: Reads local
animation.jsonfiles for rendering as shown in SKILL.md. - Boundary markers: None present for the code templates.
- Capability inventory: Limited to animation playback and property control; no shell execution, file system modification, or network exfiltration capabilities identified.
- Sanitization: Relies on the
lottie-reactand underlyinglottie-weblibrary's internal parsing and sandboxing for expression safety.
Audit Metadata