design-landing-motion
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a structured workflow for generating React, Next.js, or static HTML code for landing pages. It includes extensive documentation on motion design and WebGL patterns to ensure high-quality output.
- [EXTERNAL_DOWNLOADS]: The skill orchestrates the generation of images and videos through delegated services (moai-media) and downloads the results to the project's static assets directory. These assets are referenced from the same-origin to prevent tracking and ensure availability.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user briefs and project-level design tokens to generate tailored code.
- Ingestion points: User-provided text briefs and project configuration files (e.g., palettes, typography settings).
- Boundary markers: The workflow uses a "Concept Spine" (a single anchor sentence) to constrain the AI's creative output to the user's intent.
- Capability inventory: The skill writes frontend code (HTML/CSS/JS) to the local filesystem and invokes visual generation tools within the vendor ecosystem.
- Sanitization: A comprehensive "Quality Gate" (quality-gate.md) provides a checklist for accessibility, performance, and brand consistency to review generated content before final delivery.
- [COMMAND_EXECUTION]: The skill performs environment detection by checking for the presence of files like
package.jsonto determine if it should generate React/Next.js code or static HTML. This is a standard and safe capability for development tools.
Audit Metadata