motion
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of the official 'motion' and 'framer-motion' packages via standard package managers (npm, pnpm, yarn). There are no instances of downloading or executing scripts from untrusted remote sources.
- [COMMAND_EXECUTION]: The provided automation scripts (init-motion.sh and optimize-bundle.sh) perform routine development tasks, such as creating local directories and generating boilerplate React components. These actions are transparent, localized to the project root, and consistent with the skill's intended use.
- [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration patterns were detected. The skill does not attempt to read sensitive files (such as SSH keys or cloud credentials) or transmit data to external domains.
- [PROMPT_INJECTION]: The instructions are strictly limited to technical guidance for animation development. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [OBFUSCATION]: All code, scripts, and documentation are provided in human-readable formats. No encoded payloads, hidden characters, or deceptive naming conventions were found.
Audit Metadata