animate-skill

Warn

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's primary purpose is to trigger the installation of external code from a third-party GitHub repository (delphi-ai/animate-skill) using the npx skills add command.
  • [COMMAND_EXECUTION]: The skill provides specific shell commands for the agent to execute, including filesystem checks (grep, [ -e ...]) and software installation via npx. It explicitly instructs the agent to use the ! prefix (dynamic context injection) to run these commands directly on the host machine.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 10:43 AM
Security Audit — agent-trust-hub — animate-skill