text-to-lottie
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download a project template from the repository "diffusionstudio/lottie" using the "npx degit" command. This is used to provide the necessary rendering environment for the animations.
- [COMMAND_EXECUTION]: The skill directs the execution of several shell commands, including "npm install" and "npm run dev", to set up and host the local development server for the animation player.
- [COMMAND_EXECUTION]: An inline Node.js script ("node -e 'JSON.parse(...)'") is used as a utility to validate that the generated Lottie files are well-formed JSON before finishing a task.
Audit Metadata