lottiefiles-animation-review
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (animation source and results) which could contain malicious instructions.
- Ingestion points: The
engine_documentandengine_exectools are used to inspect and render source content as specified inSKILL.md. - Boundary markers: No specific delimiters or safety warnings are provided for the agent to treat the animation content as untrusted data.
- Capability inventory: The skill utilizes tools for document inspection (
engine_document) and engine execution (engine_exec). - Sanitization: There are no instructions for sanitizing or validating the contents of the animation files before processing.
Audit Metadata