anima-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a comprehensive checklist that encourages developers to use secrets managers and rotate API keys, which are standard security best practices.
- [SAFE]: The included TypeScript validation script performs connectivity tests against the official Anima and Figma APIs to ensure the environment is correctly configured with the necessary credentials provided by the user.
- [SAFE]: The validation script includes a local check that scans files in the build directory (
./dist) to ensure theANIMA_API_KEYhas not been accidentally leaked into the generated artifacts, serving as a protective mechanism for the user. - [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscated code were detected in the instructions or the utility script.
Audit Metadata