text-to-lottie
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed of markdown documentation and reference materials designed to guide an AI agent in generating Lottie JSON animations. No malicious scripts, obfuscated code, or unauthorized network operations were detected.
- [COMMAND_EXECUTION]: The skill includes a standard command-line instruction for the agent to validate generated JSON files using Node.js (
node -e "JSON.parse(...)"). This is a restricted and benign use of command execution intended for data integrity checks. - [DATA_EXPOSURE]: File operations are limited to the skill's workspace within
public/projects/. The skill does not access sensitive system directories, environment variables, or user credentials. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests user prompts to generate animation data, it includes extensive guidance on Lottie specification adherence and structural validation. The risk of the agent being manipulated through malicious input is minimal and handled by standard LLM guardrails.
Audit Metadata