motion-meaning

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The verify-reduced.mjs script automates the installation of the Playwright testing library and the Chromium browser engine. These resources are retrieved from official package registries and trusted service providers.
  • [COMMAND_EXECUTION]: The skill uses node:child_process (spawnSync) to manage its local environment, including installing its own dependencies into a dedicated cache directory (~/.cache/motion-meaning-verify) and running the test suite.
  • [DYNAMIC_EXECUTION]: A temporary runner script is generated at runtime to facilitate Playwright execution, and the skill uses page.evaluate to retrieve specific UI metadata during the verification process.
  • [SAFE]: The implementation includes robust security boundaries, such as a path-restriction policy that limits the test runner to an internal fixtures directory by default and a strict sanitization function (readMm) that converts data from tested pages into a fixed, typed object schema.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 04:58 AM
Security Audit — agent-trust-hub — motion-meaning