motion
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The performance audit module utilizes the
npx motionscore <url> --agentcommand to evaluate the rendering efficiency of live web pages. This allows the agent to execute a domain-specific tool to provide requested analysis. - [REMOTE_CODE_EXECUTION]: The skill documentation includes instructions to use
npx, which executes code from the npm registry to run themotionscoreutility. - [EXTERNAL_DOWNLOADS]: The skill mentions obtaining the
motion-pluspackage from a private npm registry. It correctly advises users to manage their own access tokens securely and avoid sharing them within the session context. - [PROMPT_INJECTION]: The skill includes specific instructions for the agent to ensure high-fidelity migration between library versions, such as requiring the agent to read full pages without summarization. These are functional instructions to maintain technical accuracy during software upgrades.
Audit Metadata