lottie-motion-builder
Warn
Audited by Snyk on Jul 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's bootstrap script clones remote code at runtime from https://github.com/diffusionstudio/lottie.git (also referenced as https://github.com/diffusionstudio/lottie), and the harness is required by the skill so this fetch brings in and enables execution of external code the skill relies on.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata