animate-css-skill
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs agents to download and install a package from an unverified GitHub repository (
msrbuilds/animate-css-skill). - Evidence: The
upstreamfield in bothSKILL.mdandstub.yamlpoints to this external repository. - [COMMAND_EXECUTION]: The documentation provides explicit shell commands for the agent to execute in order to install additional components.
- Evidence: The skill instructs the use of
npx skills add msrbuilds/animate-css-skillacross multiple sections ofSKILL.md. - [DYNAMIC_CONTEXT_INJECTION]: The skill documentation explicitly references the
!commandsyntax for triggering shell execution at load time within specific agent platforms. - Evidence: The "Decision tree" section in
SKILL.mdsuggests sending! npx skills add ...as a chat message for users on the Claude Code platform.
Audit Metadata