ae-motion-principles
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources which could be used to influence agent behavior through embedded instructions.
- Ingestion points: The skill reads After Effects project metadata via
ae_project_info, animation states viaae_find_animation, and processes natural language feedback through theae_review_motiontool'snoteparameter. - Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore potential commands embedded within project metadata (like layer names or marker comments) or user-provided notes.
- Capability inventory: The skill utilizes a powerful toolset for modifying the host environment, including
ae_add_keyframes,ae_edit_keyframes,ae_apply_effect, andae_layer_action. These allow for significant modification of the After Effects project. - Sanitization: While the skill suggests using
ae_proofto validate the technical integrity of the motion (e.g., checking for strobing or timing drifts), it does not specify sanitization or filtering of input strings for instruction-like patterns.
Audit Metadata