paper-cut-motion

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a material system and physical rules for generating stop-motion animation assets. The instructions are purely instructional and do not attempt to bypass safety filters or override agent constraints.
  • [COMMAND_EXECUTION]: The script scripts/paper_builder.py is a standard utility that uses the argparse and json libraries to process metadata and generate a file. It does not perform network operations, access sensitive system files, or execute external commands.
  • [INDIRECT_PROMPT_INJECTION]: The tool ingests text data through the text parameter to create visual labels in the generated HTML.
  • Ingestion points: The text argument in the build_paper_piece function within scripts/paper_builder.py.
  • Capability inventory: The script writes a generated HTML file to the path specified by the user via the --output flag.
  • Sanitization: The script correctly mitigates potential XSS risks when embedding data into the HTML template by using json.dumps() followed by replace("<", "\\u003c") to prevent closing the <script> tag. Additionally, the generated JavaScript uses .textContent to safely render the text within the DOM.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 05:42 AM