The Agent Skills Directory

[PROMPT_INJECTION]: The skill's instructions focus entirely on technical implementation and library usage. No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
[DATA_EXPOSURE]: There are no hardcoded credentials, sensitive file paths, or unauthorized data access patterns. The skill correctly recommends standard practices like using environment variables for configuration.
[EXTERNAL_DOWNLOADS]: The skill references the installation of legitimate, well-known libraries (motion, framer-motion) through standard package managers (npm, pnpm, yarn). All documentation links point to official domains such as motion.dev and GitHub.
[COMMAND_EXECUTION]: The provided utility scripts (init-motion.sh and optimize-bundle.sh) are benign setup helpers. They perform standard development tasks such as detecting project frameworks, installing documented dependencies, and creating local component templates based on the user's project structure.
[OBFUSCATION]: All code, scripts, and documentation are provided in clear, human-readable text. No Base64, hex-encoding, or hidden character techniques were used to conceal content.
[INDIRECT_PROMPT_INJECTION]: While the skill provides templates that render user-supplied data (e.g., product lists or tab content), these are standard React UI patterns with low risk of exploitation in this context. No unsafe interpolation of untrusted data into sensitive system commands was found.

motion