motion-physics

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install @vueuse/motion via npm. This is a well-known and legitimate community library for handling micro-interactions in Vue.js applications, and its installation is a standard development procedure.
  • [COMMAND_EXECUTION]: Instructions in SKILL.md guide the agent to execute a local Python script (suggest_next_skill.py) within the skill's directory structure. This script is intended to facilitate navigation and suggestions for subsequent agent actions.
  • [DYNAMIC_EXECUTION]: The helper utility scripts/_skill_cli.py includes a run_command function that wraps subprocess.run. This function uses argument lists rather than shell strings, following security best practices to prevent command injection while performing automation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 09:33 PM