conductor-motion
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a local generator for web animation patterns. It implements proper sanitization for user-supplied content using HTML and JavaScript escaping functions to mitigate potential injection vulnerabilities in the generated files.
- [EXTERNAL_DOWNLOADS]: The generated output references the Lottie animation library via Cloudflare's well-known CDN (cdnjs.cloudflare.com) and pulls fonts from Google Fonts. These are established services and the references are used for their intended functional purposes.
- [COMMAND_EXECUTION]: The Python scripts included with the skill facilitate template processing and file validation. They use standard library modules for local operations and do not execute external commands or interact with unauthorized network endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies potential attack surfaces when processing untrusted document data and enforces mitigations, such as using textContent instead of innerHTML, to ensure data is handled safely.
Audit Metadata