lottie-bodymovin

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: The content is focused on providing technical documentation and code examples for user interface animations using the Lottie framework.
  • [EXTERNAL_DOWNLOADS]: Integration with the lottie-react library is documented for animation rendering. This is a standard npm package for web development.
  • [DYNAMIC_EXECUTION]: The skill provides examples of After Effects expressions. These are interpreted by the Lottie player at runtime to drive animation logic, representing a controlled form of dynamic execution within the animation engine.
  • [INDIRECT_PROMPT_INJECTION]: Analysis of data ingestion surface:
  • Ingestion points: Reads local animation.json files for rendering as shown in SKILL.md.
  • Boundary markers: None present for the code templates.
  • Capability inventory: Limited to animation playback and property control; no shell execution, file system modification, or network exfiltration capabilities identified.
  • Sanitization: Relies on the lottie-react and underlying lottie-web library's internal parsing and sandboxing for expression safety.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 09:33 PM