stitch-animate
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading project configuration and component source code to determine framework compatibility and animation targets.
- Ingestion points: The skill reads
package.jsonand previously generated component files (e.g., Next.js or Svelte components) as described in Step 1 and Step 2 ofSKILL.md. - Boundary markers: There are no explicit instructions for the agent to use delimiters or 'ignore' directives when processing the content of these external files.
- Capability inventory: The skill has the capability to modify existing files via
Writeand execute shell commands usingBash(specifically to install packages likeframer-motion). - Sanitization: The skill does not perform validation or sanitization of the ingested code strings before they are incorporated into the agent's reasoning or modification tasks.
Audit Metadata