klik-anim
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a comprehensive style guide and library for Remotion video development. It defines easing curves, timing presets, and visual effects to ensure high-quality output.
- [COMMAND_EXECUTION]: The skill includes a Node.js script (
scripts/lint-motion.mjs) used for static analysis of local project files. The script is written in clean, readable Node.js using only built-in modules (fs,path) and performs non-malicious checks for non-deterministic code or layout-property animation. It lacks any network or persistence capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and editing files in a user's Remotion project (e.g.,
src/Composition.tsx). While this exposes the agent to untrusted data from the project's source code, this is an inherent aspect of the skill's primary purpose as a development tool and does not represent a specific security flaw in the skill's instructions.
Audit Metadata