motion-physics
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install
@vueuse/motionvianpm. This is a well-known and legitimate community library for handling micro-interactions in Vue.js applications, and its installation is a standard development procedure. - [COMMAND_EXECUTION]: Instructions in
SKILL.mdguide the agent to execute a local Python script (suggest_next_skill.py) within the skill's directory structure. This script is intended to facilitate navigation and suggestions for subsequent agent actions. - [DYNAMIC_EXECUTION]: The helper utility
scripts/_skill_cli.pyincludes arun_commandfunction that wrapssubprocess.run. This function uses argument lists rather than shell strings, following security best practices to prevent command injection while performing automation tasks.
Audit Metadata