openrive-create-animation

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses bun run cli to execute local OpenRive commands for animation creation, inspection, and export. These commands are scoped to the project's animation workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of .riv animation files and templates.
  • Ingestion points: External .riv files are loaded via validate, info, and list_templates tools in SKILL.md.
  • Boundary markers: None explicitly defined for binary animation assets.
  • Capability inventory: The skill can write to the filesystem (export_riv, bun run cli export), modify animation properties (set_property_value), and perform network operations via HTTP MCP.
  • Sanitization: The skill utilizes openrive validate to ensure file integrity and consistency during processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:08 PM