skills/gsfsss/motiscope/recreate/Gen Agent Trust Hub

recreate

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external animation specifications and frame descriptions to generate runnable code and asset generation prompts.\n
  • Ingestion points: Animation manifests (manifest.json) and raw energy curves (motion.json) located in the .motiscope directory.\n
  • Boundary markers: The skill does not employ boundary markers or specific instructions to the agent to ignore potentially malicious instructions embedded within the animation spec data.\n
  • Capability inventory: The skill has access to Bash (shell execution), Write (filesystem modification), and interaction with other animation skills.\n
  • Sanitization: There is no evidence of sanitization or strict schema validation for the animation and effect fields before they are used in code generation.\n- [COMMAND_EXECUTION]: The skill invokes the Bash tool to execute local Python scripts (config.py and assetgen.py) used for configuration retrieval and automated asset generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:37 AM