Book a 30-minute demo →
Skill scan report

chat-motion-overlay

View on GitHub
14 Low Automated analysis flagged 2 potential risk patterns.

What this skill does

Generate configurable chat motion overlays from a transcript or screenshot for video editing and animation purposes.

github/nexu-io - MCP Least Privilege - 84.9k stars

ThreatsMCP Least Privilege Supply Chain

Threat analysis

MCP Least Privilege1 finding
Supply Chain1 finding

Skill info

Namenexu-io/chat-motion-overlay
Registrygithub
Versionbf71452
PURLpkg:github/nexu-io/open-design@bf71452?skill=chat-motion-overlay
Stars84.9k

Assessments (2)

MCP Least Privilege1 finding MEDIUM
MEDIUM

MCP Least Privilege via local-llm-review

SKILL.md

The skill's triggers and description suggest it may be used in contexts that require access to user data or system resources, but there is no explicit mention of least privilege principles being follo
Supply Chain1 finding LOW
LOW

Supply Chain via local-llm-review

assets/remotion-template/package.json

The package.json file specifies dependencies on external libraries, which could introduce supply chain risks if not properly managed and audited.

Badge

Add the Anomity scan badge for chat-motion-overlay to your README.

Anomity Skill Check badge

Markdown
[![Anomity Skill Check](https://anomity.ai/skills/badge.svg)](https://anomity.ai/skills/github/nexu-io/chat-motion-overlay/)
HTML
<a href="https://anomity.ai/skills/github/nexu-io/chat-motion-overlay/"><img src="https://anomity.ai/skills/badge.svg" alt="Anomity Skill Check"></a>
Image URL
https://anomity.ai/skills/badge.svg

How Anomity governs this at runtime

Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.

Book a 30-minute demo to see your own skill inventory.

Methodology and disputes

Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of chat-motion-overlay? Report an issue or request a rescan.

Ask AI about Anomity
ChatGPT Claude Perplexity Google AI Grok