Animation
v1.0.0Generate CSS and SVG animation code snippets using bash and Python. Use when building UI animations, keyframes, or transition effects.
⭐ 0· 220·0 current·0 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (CSS/SVG animation generator) matches the included files: an instruction SKILL.md and a bash script that invokes embedded Python to create keyframes, transitions, sequences, previews, and stores records in ~/.animation/data.jsonl. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
The runtime instructions and the script operate only on a local data file (~/.animation/data.jsonl) and produce output to stdout or files (preview/export). Two notes: (1) the preview/export features produce HTML/CSS/SVG files that may include user-supplied content (expected for a preview tool) — opening those files in a browser could expose XSS if you feed untrusted inputs; (2) the script uses an ARGS environment variable to pass options into embedded Python in many command handlers, but some branches (e.g., create and timing) do not set ARGS before invoking Python, which is an implementation bug/inconsistency rather than a security issue.
Install Mechanism
There is no install spec; the skill is instruction-only with a single script. Nothing is downloaded or written outside the user's home directory except the skill files themselves, so install risk is low.
Credentials
The skill declares no required environment variables or credentials. The script allows overriding the data file via DATA_FILE env var (reasonable for a CLI utility). There are no requests for secrets or unrelated service tokens.
Persistence & Privilege
The skill persists its own data under ~/.animation and does not attempt to modify other skills, system-wide agent settings, or require always-on privilege. It does rewrite the data file when updating records (normal for a local datastore).
Assessment
This skill appears to do what it says: generate and store animation snippets locally. Before installing or running it: (1) be aware it writes to ~/.animation/data.jsonl — back up any file with the same name if you care about collisions; (2) preview/export create HTML/CSS/SVG files that may contain user-provided content — do not open preview files from untrusted sources without inspection; (3) there are minor implementation inconsistencies (some commands rely on ARGS but aren’t always set) that may cause commands to behave unexpectedly — test in a safe environment first; (4) the tool does not request credentials or talk to the network in the provided code, so its privileges are limited to your home directory.Like a lobster shell, security has layers — review code before you run it.
latestvk972h4k4k30rc1qmzhk7wxnyth834j8g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.