motion

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides documentation and automation scripts (scripts/init-motion.sh) to install the motion (and framer-motion) packages from the official npm registry. These are well-known, industry-standard libraries for React animations.
  • [COMMAND_EXECUTION]: The provided shell scripts (init-motion.sh, optimize-bundle.sh) perform standard project setup tasks such as creating directories, generating boilerplate React components using cat, and running package managers (npm, pnpm, yarn). These actions are transparent and align with the stated purpose of automating library setup.
  • [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found. The skill includes sections on accessibility (respecting OS-level reduced motion settings) and best practices for performance, such as using LazyMotion to reduce bundle size.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 06:59 PM