motion-and-animation
Warn
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The checker script dynamically imports TypeScript modules from the project being analyzed to evaluate the animation catalog.
- Ingestion point:
scripts/lib/app-modules.mjsuses theimport()function with dynamically constructed URLs to load files from the audited project (e.g.,src/ui/motion/motion-moments.ts). - Purpose: Loads the application's animation metadata to perform validation against project-specific constants.
- Mechanism: Utilizes Node.js
module.registerHooksto intercept and transform module resolution for TypeScript support. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting and printing strings from untrusted application source files back to the agent's context.
- Ingestion points:
scripts/check-motion.mjsandscripts/lib/source-scan.mjswalk the audited repository and read.tsand.tsxfiles. - Boundary markers: Extracted "trigger" descriptions and moment metadata (which are arbitrary strings in the user's code) are printed in tables or logs without delimiters or "ignore instructions" warnings.
- Capability inventory:
scripts/check-motion.mjsperforms extensive file reading and outputs extracted content to the console, which is subsequently interpreted by the AI agent. - Sanitization: No filtering or escaping is performed on strings extracted from the audited codebase before they are presented to the agent.
Audit Metadata