lottie-favorite
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill was analyzed for prompt injection, data exfiltration, obfuscation, and remote code execution vulnerabilities. No malicious patterns were found across any of the provided files.
- [EXTERNAL_DOWNLOADS]: The skill references an external GitHub repository (spemer/lottie-animations-json) as the upstream source for the animation asset under an MIT license. This is standard attribution for open-source motion assets.
- [REMOTE_CODE_EXECUTION]: The skill instructions and preview logic involve the well-known 'lottie-web' library to render the local 'animation.json' file. The rendering process is confined to the local environment and does not involve executing untrusted remote scripts or commands.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes structured JSON data ('animation.json') for rendering, this is a static asset included in the skill package with no surface for untrusted user-controlled data to influence agent behavior.
Audit Metadata