Skills/npm/huashu-motion

huashu-motion@0.4.0

VERIFIED· startup only

Publisher claims: "Make motion graphics with your own coding agent — point at the frame to change it. Open, local, with sound." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher alchaincyf · publishing for 27 daysInstalls 3,843Last detonated 4d ago
$claude mcp add huashu-motion -- npx -y huashu-motion
WatchReport an issue

Coverage

Startup only; authenticated tool behavior not tested.
Tested
server startup over stdio (initialize sent) · every file read, file written and host contacted by what ran
Not tested
the tool list (the server exited before answering) · what the tools do when called with real credentials

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; startup only; authenticated tool behavior not tested) on 2026-11-10 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 20 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
20sclaimedstartup only: exited (0) before answering · om share [dir] [--from s] [--to s] after a render: a ≤10 MB GIF (opening + end frame) and share.md (post, README header) om export html [dir] [--out folder] [--title …] [--desc …] share page (player, Remix prompt, source.zip) for any static host om doctor check Node, FFmpeg and the renderer Docs: skills/huashu-motion/SKILL.md
20sprocessscript backend runs setup only
20sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageskills/huashu-motion/SKILL.md:41 · npx invocation of non-well-known package — may execute untrusted codeOM="<this skill's folder>/bin/om" # or: npx huashu-motion (same commands)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagecli/lib/export.js:286 · npx invocation of non-well-known package — may execute untrusted code<div class="code cmd"><pre id="skill">npx skills add ${esc(SKILL)}</pre><button class="copy" data-copy="skill"></button></div>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagecli/lib/export.js:301 · npx invocation of non-well-known package — may execute untrusted codezh: { copy: '复制', copied: '已复制', prompt: (t, url) => '用 huashu-motion 复刻这部片：《' + t + '》。\\n源码：' + url + '（下载解压后运行 \`npx huashu-motion studio ' + D.name + '\`，我边看边指着画面改）。\\n保留好的部分，把它改成：' },Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageruntime/three/entry.js:1 · npx invocation of non-well-known package — may execute untrusted code// The three.js bundle huashu-motion ships: build with `npx [email protected] entry.js --bundle --minify --format=iife --legal-comments=none --outfile=three.min.js`Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
LOW
HTML comment carrying imperative instructions to the agenttemplates/ui-space/index.html:57 · HTML comment carrying imperative instructions to the agent · informational: not an instruction fileInterface in space: a real screenshot cut into layers that lift apart in depth, pieces rebuilt in code where they have to change or stay sharp, one continuous 3Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
File type combined with upload actioncli/lib/export.js:122 · File type combined with upload action — agent may exfiltrate local data filesfor (const f of ['Inter-var.woff', 'NotoSansSC-500.woff', 'OFL.txt']) put(`fonts/${f}`, readFileSync(join(PKG, 'fonts', f)));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagecli/lib/export.js:287 · npx invocation of non-well-known package — may execute untrusted code<div class="code cmd"><pre id="demo">npx huashu-motion demo</pre><button class="copy" data-copy="demo"></button></div>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Process kill commandcli/lib/cdp.js:32 · Process kill command — agent can terminate processes// Ctrl-C or a kill does not run 'exit' handlers: what must not be left behind (browsers, temp profiles, a render'sFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Collapsed <details> block carrying instructionsREADME.en.md:152 · Collapsed <details> block carrying instructions<summary><b>huashu-design 3.0 launch film</b> · one line + a direction, accepted at the first cut, then pushed further</summary> > Open two more FanBox windows Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packagecli/lib/export.js:262 · npx invocation of non-well-known package — may execute untrusted code<code>npx serve .</code>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagecli/om.js:354 · npx invocation of non-well-known package — may execute untrusted codereturn out(`${r.dir}\n index.html open it, or put the folder on any static host (GitHub Pages, Vercel, npx serve)\n source.zip ${r.files.length} files — unzip and run om studio ${r.name}`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
LOW
HTML comment carrying imperative instructions to the agenttemplates/object-3d/index.html:37 · HTML comment carrying imperative instructions to the agent · informational: not an instruction fileA real product object in a lit studio, one continuous camera (OM.space) and a WebGL layer driven by the timeline (OM3.film). Type stays in the DOM: sharp, editaFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
npx invocation of non-well-known packagecli/lib/export.js:300 · npx invocation of non-well-known package — may execute untrusted code…u-motion: "' + t + '".\\nSource: ' + url + ' (download and unzip it, then run \`npx huashu-motion studio ' + D.name + '\` so I can watch and point at the frame while you work).\…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈6,559 tok
1 file · 80 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for huashu-motion@0.4.0 as of 4d ago. This is the package itself, not its dependencies.