animate
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates the use of
npx shadcn@latestto add UI components to the project. This is a standard practice in modern React development and utilizes a well-known, trusted utility. - [COMMAND_EXECUTION]: Shell commands are utilized via the
npxpackage runner for the legitimate purpose of automating the installation of UI components. - [PROMPT_INJECTION]: The skill manages the risk of indirect prompt injection by using a mandatory multi-step validation sequence for all user animation requests. This ensure that only purpose-driven and technically sound implementations are generated.
- Ingestion points: The skill interprets natural language descriptions of motion and transitions provided by the user in the prompt.
- Boundary markers: The 'Build Sequence' (e.g., 'Should this animate at all?' and 'What is the purpose?') functions as a logical boundary to filter and validate user input before code generation occurs.
- Capability inventory: The skill generates and writes CSS/JavaScript and executes shell commands for component management.
- Sanitization: Animation parameters are restricted to pre-defined property, curve, and duration tables, effectively preventing the use of unsafe or arbitrary values provided by the user.
Audit Metadata