illustration-animator
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's setup process downloads the 'Chrome for Testing' binary and installs Node.js dependencies.
- Evidence:
engine/src/setup/chrome.jsuses the@puppeteer/browserslibrary to fetch the browser and includes hardcoded SHA-256 hashes for integrity verification across different platforms. - Evidence:
engine/src/setup/deps.jsutilizesnpm cito install dependencies from a pinnedpackage-lock.jsonfile into a local directory (~/.animator/deps). - [COMMAND_EXECUTION]: The skill executes various Node.js scripts and system utilities required for rendering and video encoding.
- Evidence:
engine/bin/batch.jsandengine/bin/make.jsusespawnandexecFileSyncto run internal animation scripts and invokeffmpegfor video processing. - Evidence:
engine/src/render/frames.jsusespuppeteer-coreto manage a headless browser instance for rendering SVG frames. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied SVG data which is evaluated by subagents during the analysis and verification steps.
- Ingestion points: User-provided SVGs are parsed by
engine/src/svg/parse.jsand rendered in the browser. - Boundary markers: The skill workflow uses separate subagent contexts to isolate the processing and visual evaluation of untrusted illustration data.
- Capability inventory: The engine possesses capabilities for file system operations (scoped to the style folders and temporary directories) and execution of local scripts and system tools (
node,ffmpeg, browser). - Sanitization: SVGs are processed through a custom parser before being rendered, reducing the surface area for certain types of injection.
Audit Metadata