The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes several Node.js scripts (motion-lint.mjs, codemod-duration.mjs, codemod-transition-all.mjs) designed to perform file system read and write operations within a target project directory to audit and refactor motion-related code.
[EXTERNAL_DOWNLOADS]: The skill recommends using npx to install additional capabilities from trusted sources, such as the vercel-react-view-transitions skill from Vercel Labs' official repository. It also utilizes a performance measurement script that fetches the web-vitals library from a public CDN (unpkg.com).
[DYNAMIC_EXECUTION]: The measure-motion.mjs utility uses the Playwright browser automation library to drive a target URL (performing hovers, clicks, and scrolls) to collect real-time performance metrics like Interaction to Next Paint (INP) and Long Animation Frames (LoAF).
[INDIRECT_PROMPT_INJECTION]: The skill's auditing tools (linter and codemods) ingest untrusted source code from the target repository, and the measurement tool interacts with external URLs. While this presents an attack surface where malicious content in those files or pages could attempt to influence the agent's behavior through the tool's output, the scripts themselves do not execute instructions found in the data.
[SAFE]: The resources and guidance are aligned with professional design engineering best practices (distilled from WWDC and animations.dev). All external dependencies trace back to trusted organizations, well-known services, or the vendor's own namespace (@visant).

visant-motion