design-landing-motion

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides a structured workflow for generating React, Next.js, or static HTML code for landing pages. It includes extensive documentation on motion design and WebGL patterns to ensure high-quality output.
  • [EXTERNAL_DOWNLOADS]: The skill orchestrates the generation of images and videos through delegated services (moai-media) and downloads the results to the project's static assets directory. These assets are referenced from the same-origin to prevent tracking and ensure availability.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user briefs and project-level design tokens to generate tailored code.
  • Ingestion points: User-provided text briefs and project configuration files (e.g., palettes, typography settings).
  • Boundary markers: The workflow uses a "Concept Spine" (a single anchor sentence) to constrain the AI's creative output to the user's intent.
  • Capability inventory: The skill writes frontend code (HTML/CSS/JS) to the local filesystem and invokes visual generation tools within the vendor ecosystem.
  • Sanitization: A comprehensive "Quality Gate" (quality-gate.md) provides a checklist for accessibility, performance, and brand consistency to review generated content before final delivery.
  • [COMMAND_EXECUTION]: The skill performs environment detection by checking for the presence of files like package.json to determine if it should generate React/Next.js code or static HTML. This is a standard and safe capability for development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:25 PM