motion
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides documentation and automation scripts (
scripts/init-motion.sh) to install themotion(andframer-motion) packages from the official npm registry. These are well-known, industry-standard libraries for React animations. - [COMMAND_EXECUTION]: The provided shell scripts (
init-motion.sh,optimize-bundle.sh) perform standard project setup tasks such as creating directories, generating boilerplate React components usingcat, and running package managers (npm,pnpm,yarn). These actions are transparent and align with the stated purpose of automating library setup. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found. The skill includes sections on accessibility (respecting OS-level reduced motion settings) and best practices for performance, such as using
LazyMotionto reduce bundle size.
Audit Metadata