paper-cut-motion
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a material system and physical rules for generating stop-motion animation assets. The instructions are purely instructional and do not attempt to bypass safety filters or override agent constraints.
- [COMMAND_EXECUTION]: The script
scripts/paper_builder.pyis a standard utility that uses theargparseandjsonlibraries to process metadata and generate a file. It does not perform network operations, access sensitive system files, or execute external commands. - [INDIRECT_PROMPT_INJECTION]: The tool ingests text data through the
textparameter to create visual labels in the generated HTML. - Ingestion points: The
textargument in thebuild_paper_piecefunction withinscripts/paper_builder.py. - Capability inventory: The script writes a generated HTML file to the path specified by the user via the
--outputflag. - Sanitization: The script correctly mitigates potential XSS risks when embedding data into the HTML template by using
json.dumps()followed byreplace("<", "\\u003c")to prevent closing the<script>tag. Additionally, the generated JavaScript uses.textContentto safely render the text within the DOM.
Audit Metadata