Security audit
Security checks for vulnerabilities and agentic risk
This skill is a frontend motion-design guide with no executable code, credential handling, persistence, or hidden high-impact behavior.
Install this if you want an agent to apply structured frontend motion, animation-performance, and accessibility guidance. Review the broad trigger description if you prefer skills to activate only on very explicit requests.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- ID: `fec-motion-interaction`
- Category: `design-ui`
- Version: `2.9.0`
- Source: `skills/fec-motion-interaction/SKILL.md`
## Description
The manifest description says to use the skill for broad phrases like 'designing', 'implementing', or 'reviewing' frontend motion topics, and lists generic trigger terms such as 'motion design' and 'interactive effects'. Although it includes some exclusions, the activation scope is still expansive and may cause unintended invocation for ordinary frontend discussions involving animation or effects.
The description explicitly states that Chinese triggers include several phrases, but it does not indicate that multilingual triggering is optional or limited to a justified locale-specific deployment. This can create a language/locale policy concern because the skill behavior is partially defined around a specific language without user opt-in.
The manifest text explicitly states 'Chinese triggers include ...' while the rest of the description is otherwise general-purpose and not documented as region-specific. This creates a locale-specific behavior expectation without an explicit opt-in or justification, which matches the language/locale policy concern.
No suspicious patterns detected.