motion-doctrine — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  warn

  This skill provides animation automation tools that generate and verify video motion code. It uses Node.js scripts to write GSAP code to files and execute shell commands to run a preview server and a headless browser. A potential security risk is present in the verification script, which executes shell commands that can be customized via command-line arguments.

  Risk: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONJul 16, 2026Full report

• Socket

  warn

  1 alert: gptAnomaly

  Jul 16, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWJul 16, 2026Full report