anima-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the @animaapp/anima-sdk package and performs connectivity tests against the official Figma API (api.figma.com). These references to well-known services are appropriate for the skill's diagnostic purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from API responses and SDK error messages. 1. Ingestion points: The script in SKILL.md captures API response data and error strings. 2. Boundary markers: No specific delimiters are present for external data. 3. Capability inventory: The skill uses file writing (fs.writeFileSync) and network fetching (fetch). 4. Sanitization: The script explicitly redacts values for ANIMA_TOKEN and FIGMA_TOKEN before saving the report.
Audit Metadata