motion-and-animation
Warn
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions suggest running
npx saglitzdesign-mcpto access advanced animation tools and documentation. This command downloads and executes code from the npm registry at runtime. - [EXTERNAL_DOWNLOADS]: The skill depends on an external package,
saglitzdesign-mcp, which is fetched from a public registry without version pinning or hash verification, introducing potential supply chain risks.
Audit Metadata