motion
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the full skill definition and related resources from the official Motion GitHub organization repository (motiondivision/ai-kit).
- [COMMAND_EXECUTION]: Employs shell commands to detect whether the skill is already installed and to determine the appropriate installation scope (global or project-local).
- [REMOTE_CODE_EXECUTION]: Uses the
npxpackage runner to execute the installation utility and themotion-aiconfiguration tool, which involves downloading and running code from the npm registry. - [INDIRECT_PROMPT_INJECTION]: As a catalogue stub, this skill points the agent toward external instructions hosted on GitHub. This represents a standard distribution pattern for official vendor tools and relies on the security of the upstream repository.
Audit Metadata