anima-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes environment variables (e.g., ANIMA_TOKEN, FIGMA_TOKEN) to handle sensitive credentials, which is the recommended practice for preventing secret exposure.\n- [SAFE]: All network operations are directed towards official Figma and Anima API endpoints via the
@animaapp/anima-sdk, which is consistent with the skill's stated purpose of design-to-code conversion.\n- [SAFE]: The file system operations are limited to writing generated code to a local directory (./generated), which is a standard and safe operational pattern for code generation tools.\n- [SAFE]: The dependencies and shell commands (npm install, cp) are standard development workflow tasks and do not involve remote code execution from untrusted or unverified sources.
Audit Metadata