Auto Animate
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned and benign; the main thing to notice is an optional setup script that installs an npm package and writes example files into a React project.
This skill is mainly documentation and templates for AutoAnimate. If you use the included setup script, run it from the correct project directory, check which files it creates or overwrites, and review the added npm dependency version.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user runs the script, it will change the project by adding a dependency and creating or overwriting example source files at fixed paths.
The helper script runs package-manager commands and writes files into the user's project. This is disclosed and fits the setup purpose, but it is still local code execution and project mutation.
pnpm add @formkit/auto-animate ... yarn add @formkit/auto-animate ... npm install @formkit/auto-animate ... cat > src/components/AnimatedListExample.tsx
Run the script only in the intended project root, preferably with version control enabled, and review the resulting diff before committing.
The installed dependency can change over time, which may affect reproducibility or introduce upstream package risk.
The setup installs an external npm package without pinning an exact version. This is expected for the skill's purpose, but users may receive a newer package version than the documentation references.
pnpm add @formkit/auto-animate
Consider pinning a reviewed version of @formkit/auto-animate in package.json or reviewing the package version installed by the script.