animate
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user requests to generate animation code, creating a potential surface for indirect instructions to influence output.
- Ingestion points: User-provided requests for motion implementation are ingested via the main interaction flow defined in
SKILL.md. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within the user's motion requests.
- Capability inventory: The skill generates CSS and JavaScript implementations involving DOM manipulation and library-specific logic (
SKILL.md,RECIPES.md). - Sanitization: There is no documented mechanism for sanitizing user-provided descriptions before they are used to generate code snippets.
- [DYNAMIC_EXECUTION]: The skill generates and recommends the use of dynamic animation code based on predefined templates.
- The instructions in
SKILL.mdandRECIPES.mdguide the generation of script-based motion using the Web Animations API (WAAPI) and the Motion library. - This involves generating executable JavaScript for programmatic control of elements, though it primarily relies on established templates.
Audit Metadata