Skills
Navigate
skills/markoblogo/abvx-agent-skills/lottie-motion-builder/Gen Agent Trust Hub

lottie-motion-builder

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads a preview harness from a well-known repository (https://github.com/diffusionstudio/lottie.git). This is a legitimate development dependency for the skill's primary purpose of rendering and verifying Lottie JSON animations.- [COMMAND_EXECUTION]: The script scripts/bootstrap_harness.sh executes git clone, mkdir, and rm commands to manage the local installation of the external harness. These operations are scoped to the user's home directory (~/.codex/vendor/) and follow standard bootstrap patterns. The skill instructions also mention running npm install and npm run dev within that directory to start the preview server.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 03:32 PM
Security Audit — agent-trust-hub — lottie-motion-builder