anidoodle

What the source does

• FilesystemDeclared5 observations
• NetworkDeclared15 observations
• ShellDeclared4 observations
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

let style; try { style = new Function(`return (${m[1]})`)(); } catch (e) { throw new Error(`unparseable STYLE in src/canvas-core/${f}: ${e.message}`); }

t("RED: ANIDOODLE_FIGMA_API pointing at another host is refused", () => { assert.throws(() => figmaBase({ ANIDOODLE_FIGMA_API: "https://evil.example.com" }), /local test server/); assert.throws(() =>

t("no override gives Figma itself; a localhost override is kept", () => { assert.equal(figmaBase({}), "https://api.figma.com"); assert.equal(figmaBase({ ANIDOODLE_FIGMA_API: "http://127.0.0.1:4010/" }

else if (q.url.startsWith("/v1/images/")) { s.setHeader("content-type", "application/json"); s.end(JSON.stringify({ images: { "1:2": `http://127.0.0.1:${srv.address().port}/img.svg` } })); }

const env = { ...process.env, FIGMA_TOKEN: "test-token", ANIDOODLE_FIGMA_API: `http://127.0.0.1:${srv.address().port}` };

if (u.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(u.hostname)) throw new Error(`ANIDOODLE_FIGMA_API must be a local test server (http://127.0.0.1:<port>), got ${u.host}: unse

export const POPPINS_BOLD = "AAEAAAAOAIAAAwBgRFNJRwAAAAEAAmFUAAAACEdERUYJFgkZAAIkXAAAAEBHUE9TJZojvAACJJwAABT0R1NVQvCEChMAAjmQAAAnxE9TLzLbJHrtAAABaAAAAGBjbWFwkuicugAAElgAAAT4Z2x5Zpk0GVsAAB+cAAHcpGhlYWQ

"open": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

"code": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

"duck": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

const r = renderPiece(make(), SR), h = createHash("md5"); h.update(new Uint8Array(r.L.buffer)); h.update(new Uint8Array(r.R.buffer));

const useBakes = bakeCacheOn(bakeCache), bv = `${browser.version()}-${createHash("md5").update(found.executablePath ?? "playwright-default").digest("hex").slice(0, 8)}`; let loadedBakes = 0;

const md5 = (L, R) => createHash("md5").update(Buffer.from(L.buffer, L.byteOffset, L.byteLength)).update(Buffer.from(R.buffer, R.byteOffset, R.byteLength)).digest("hex");

const md5 = (b) => createHash("md5").update(b).digest("hex"), p1 = [], p2 = new Array(frames.length);

const md5 = (b64) => createHash("md5").update(Buffer.from(b64, "base64")).digest("hex");

import type { BrandElement } from "../../../src/canvas-core/brandKit";

import type { P } from "../../core";

import type { P } from "../../core";

import type { P } from "../../core";

import type { P } from "../../core";

const bin = atob(file.data), u8 = new Uint8Array(bin.length); for (let i = 0; i < bin.length; i++) u8[i] = bin.charCodeAt(i);

const s = atob(b64), n = s.length >> 1, out = new Float32Array(n);

const bytes = atob(a.float32), data = new Uint8Array(bytes.length);

const load = async (entries: Record<string, string>) => { on = true; await Promise.all(Object.entries(entries).map(async ([k, b64]) => { try { const bin = atob(b64), u8 = new Uint8Array(bin.length); f

const bin = atob(src.replace(/\s+/g, "")), u8 = new Uint8Array(bin.length);

Audit 0.4.1 · source sha 46cc64da6899 · 30 Oct 2026Report an issue or request a re-scan

• Publisheralexgreensh GitHub userOwner of the repository this skill is read from
• Source folderalexgreensh/anidoodle/skills/anidoodleThe exact folder we audited
• LicenceApache-2.0As the repository states it
• Commit pinned for this verdict46cc64da6899A new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Code-drawn stills, films, 3D motion graphics, explainers and web animations in 32 styles, with scores, narration and subtitles. Use when asked for an illustration, animation, video or drawing lesson.

---
name: anidoodle
description: Code-drawn stills, films, 3D motion graphics, explainers and web animations in 32 styles, with scores, narration and subtitles. Use when asked for an illustration, animation, video or drawing lesson.
metadata:
  created_by: Alex Greenshpun (10x Company)
  license: Apache-2.0
---

# anidoodle

Pictures, films and interactive pieces drawn entirely in code, in 2D or in 3D. One pure function
paints every frame; another composes the score and plays it. The same source rebuilds the same
pixels and the same sound on any machine, at any size, at any length. Eight acoustic instruments can
play recordings of real ones from an optional download. ASK the user before any score work; never download unasked.

The engine is the easy half. Work gets thrown away because it had no point, the subject was an
icon of itself, a style was only a palette swap, the music had no form, or the person spent their
patience approving fragments. This skill carries the craft that prevents each of those.

## Start by asking, then build

Read `references/workflows/start-here.md` and run its intake: one question at a time, only
what the request leaves open, your recommendation first. **What** are they making, in **which
style** (show the gallery sheet, https://github.com/alexgreensh/anidoodle/blob/main/skills/anidoodle/assets/styles.jpg; the list is `references/styles/INDEX.md`)
or in 3D (one medium per film), what **shape** (1x1, 9x16, 16x9, 4x5 or any W x H), how **long**
(any length; never cap it), what **sound** (silent, a music style and mood, narration), which
**characters**. "You pick" means pick and say why in one line. Write the answers into a short brief before drawing.

## What are you making?

| Making | Read |
|---|---|
| A still: hero, spot, cover, card, poster, a series | Still workflow below, `references/formats.md` |
| A picture that draws itself (timelapse, making-of) | `references/workflows/drawing-process.md` |
| A loop, sticker, animated logo, ambient header | Loop workflow below, `references/formats.md` |
| A story film, any length | Film workflow below, `references/workflows/long-film.md` |
| A 3D film or 3D motion graphics: extruded type, objects, puppets, a camera through space | `references/workflows/three-d.md` |
| An explainer or infographic; a machine that comes apart to explain an idea, in any style | `references/workflows/explainer.md`, `references/workflows/machines.md` |
| A launch or product video, or 2D motion graphics (their screenshots welcome) | `references/workflows/launch-video.md`; one world, one camera: `references/workflows/motion-film.md`; the kit: `references/workflows/launch-video-kit.md`; claims: `references/workflows/facts.md` |
| A film in someone else's brand: their exact elements, logos, fonts, sponsors, an event program | `references/workflows/brand-film.md` (imported and signed off before the first board) |
| Art for a site (hero by a headline, tiles, spots, share card) on its page colour and brand; or a web animation that reacts to the UI | `references/workflows/site-art.md`; `references/workflows/interactive.md` |
| A drawing lesson, or "how do I draw this?" | `references/workflows/teach-drawing.md` |
| A character kept identical in any style (woodcut to toy brick) | `references/workflows/character-consistency.md`, `references/anatomy.md` |
| A style matched from their image | `references/workflows/adapt-a-style.md` |
| A score or soundtrack; or a generated or licensed track cut to the film | `references/music/README.md`; `references/music/generated-tracks.md` |
| Narration, a voice-over, word timing or subtitles | `references/workflows/narration.md` |

- Music: pick a style vocabulary (`references/music/styles/vocabularies.md`; deep dives `references/music/styles/music-box.md`, `references/music/styles/lofi-electronic.md`) and mood, sketch the tension arc and motif, compose your own harmony, motif and form (references/music/compose.md, craft in references/music/theory/), revise until node tools/music.mjs craft shows only findings you chose, then check must PASS before a human listens. Styles give sound, never notes.
- Sound effects: references/music/sound-design.md. 14 layered, seeded effects cued by film frame (filmSfx); the score ducks, and every cue must be within 6 dB of it. Effects only on real direction changes, one riser + one impact per film. Under someone else's music, unpitched `tap` effects only.
- Launch films: `launchTemplate.ts` renders a product's launch from data (prompts, plates or its own UI, a score composed for it, words, install lines) in every shape from one timeline; `launch.mjs new|ship`. Habits that save tokens: `references/working-method.md`.

## The seven laws

1. **Every piece has a point.** A still: one idea, one focal subject, one light. A film: one
   transformation, one payoff, one token that returns. → `references/storytelling.md`
2. **State the realism.** Name the anatomy, the view and the reference you opened, for animals,
   objects and people alike. → `references/realism-and-craft.md`, `references/anatomy.md`
3. **A style is a way of making marks.** Change the medium, the edge and the order of the marks,
   beyond the palette. → `references/styles.md`
4. **Prove the look on ONE still, then build end to end.** After that, gates cost more than they
   save. → `references/working-method.md`
5. **The contract is absolute.** Pure in `(frame, env)` (and the input log, for interactive
   pieces), `rng(seed)` only, no clock, no `ctx.filter`. Nothing generated, with one exception the
   person opts into: narration, in the voice they chose, each take cached by hash and baked into
   the film. Images they bring may be embedded by hash; the sound pack is a separate, hash-pinned
   download. → `references/determinism-and-contract.md`, `references/workflows/narration.md`
6. **Music gets a plan, never an adjective.** A style, a mood per section, the notes as data, then
   measurements. You cannot hear it, so one hu

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-30
   ✕BLOCK D 65 / 100

   first audit · source 46cc64da6899

Questions about anidoodle

• github.com/alexgreensh/anidoodle/tree/main/skills/anidoodle — the audited source at commit 46cc64da6899 and every finding aboveObserved · 30 Oct 2026

Spotted something wrong? Report a correction · Methodology