openrive-create-animation
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bun run clito execute local OpenRive commands for animation creation, inspection, and export. These commands are scoped to the project's animation workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of
.rivanimation files and templates. - Ingestion points: External
.rivfiles are loaded viavalidate,info, andlist_templatestools inSKILL.md. - Boundary markers: None explicitly defined for binary animation assets.
- Capability inventory: The skill can write to the filesystem (
export_riv,bun run cli export), modify animation properties (set_property_value), and perform network operations via HTTP MCP. - Sanitization: The skill utilizes
openrive validateto ensure file integrity and consistency during processing.
Audit Metadata