motion-doctrine
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts (
seam-stamp.mjs,seam-gate.mjs) intended to be executed by the user via Node.js to manage animation workflows. These scripts perform routine development tasks such as generating GSAP animation code and running a headless Chrome instance to verify rendered output. - [REMOTE_CODE_EXECUTION]: The
seam-gate.mjsscript spawns a preview server usingnpx hyperframes preview. While this executes a command, it targets a local project environment and uses standard developer tooling. - [EXTERNAL_DOWNLOADS]: The verification script automatically locates and uses a local installation of Google Chrome or
chrome-headless-shell. It checks common local cache directories (e.g.,~/.cache/puppeteer) to drive the audit process. - [SAFE]: All file operations and network requests (to
localhost) are scoped to the local development project and its preview server for the purpose of animation verification.
Audit Metadata