Agent skill · Audited from source

wechat-2d-render

skill · vibe-motion/skillsLicence not declaredAudited 28 Oct 2026 · source b8818ac5e0a0

★ 1,408pushed 22 days ago
✓SAFEGrade B · 89/100 · 28 Oct 2026 · b8818ac
1,408repo stars · whole vibe-motion/skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit b8818ac5e0a0 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Clone or update https://github.com/sxhzju/wechat-2d and render the default WeChat-style 2D chat motion video with Remotion. Use when users ask for 微信聊天动画, wechat 2d chat render, 微信视频消息动效, or exporting the default demo…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “wechat-2d-render (vibe-motion/skills)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/vibe-motion/wechat-2d-render

Trust audit

Audit 0.4.1 · source read 28 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass, no license.

Findings (1)

LOWInventory / provenanceinv.no_license
F-13 Inventory / provenanceCWE-1104Layer L0
Why
no LICENSE file and no repo licence
Fix
add a licence

Audit 0.4.1 · source sha b8818ac5e0a0 · 28 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishervibe-motion GitHub organizationOwner of the repository this skill is read from
  • Source foldervibe-motion/skills/wechat-2d-renderThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdictb8818ac5e0a0A new audit runs when the source changes
  • Repository statusNot archivedLast push 22 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Clone or update https://github.com/sxhzju/wechat-2d and render the default WeChat-style 2D chat motion video with Remotion. Use when users ask for 微信聊天动画, wechat 2d chat render, 微信视频消息动效, or exporting the default demo…

---
name: wechat-2d-render
description: Clone or update https://github.com/sxhzju/wechat-2d and render the default WeChat-style 2D chat motion video with Remotion. Use when users ask for 微信聊天动画, wechat 2d chat render, 微信视频消息动效, or exporting the default demo from the wechat-2d project.
---

# WeChat 2D Render

## Workflow

1. Use `scripts/render_wechat_2d.sh` from this skill.
2. Pass `workspace_dir` as the first argument when the user specifies a folder; otherwise use the current directory.
3. Pass `output_path` as the second argument when the user specifies output; otherwise use `out/wechat-2d-transparent.mov`.
4. Pass a props JSON path as the third argument when the user provides custom Remotion props; otherwise use `shared/project/render-presets/default.json`.
5. Run the script and wait for completion.
6. Return the final absolute output path printed by the script.

## Command

```bash
bash scripts/render_wechat_2d.sh [workspace_dir] [output_path] [props_file]
```

## Installed Skill Resolution

Use the installed skill copy, not the source repo checkout:

```bash
skill_dir=""
for base in "${AGENTS_HOME:-$HOME/.agents}" "${CLAUDE_HOME:-$HOME/.claude}" "${CODEX_HOME:-$HOME/.codex}"; do
  if [ -d "$base/skills/wechat-2d-render" ]; then
    skill_dir="$base/skills/wechat-2d-render"
    break
  fi
done
[ -n "$skill_dir" ] || { echo "wechat-2d-render skill not found under ~/.agents, ~/.claude, or ~/.codex"; exit 1; }

bash "$skill_dir/scripts/render_wechat_2d.sh" "$(pwd)" "$(pwd)/out/wechat-2d-transparent.mov"
```

## Behavior

- Reuse local repo if `workspace_dir/wechat-2d` exists; otherwise clone from GitHub.
- Track remote default branch (`origin/HEAD`) when updating an existing repo.
- Install dependencies with `pnpm install`; if `pnpm` is missing, enable it through `corepack`.
- Run the project Remotion scripts:
  - `pnpm run remotion:ensure-browser`
  - `REMOTION_OUTPUT=... REMOTION_PROPS_FILE=... pnpm run remotion:render`
- Default render target is the active composition from `shared/project/projectConfig.js`, currently the `wechat-chat-motion` plugin via `ScaffoldDemo30fps`.
- Default output is ProRes 4444 with `yuva444p10le` pixel format and PNG image format, suitable for transparent-background workflows.

## Project Notes

- The project uses a scaffold/plugin split:
  - `preview/*` for local UI controls and browser preview.
  - `remotion/*` for Remotion entry wrappers.
  - `shared/scaffold/*` for common runtime.
  - `shared/project/*` for plugin and composition registry.
  - `shared/features/demoMotion/*` for the WeChat chat scene.
- Animation state must be deterministic per frame. Remotion renders frames in parallel and out of order, so do not rely on timers, mutable cursors, previous renders, or render order.
- Frame-specific data should be built from `{frame, fps, loop, sceneContext, pluginParams}` in `buildSceneProps`.
- Keep `videoWidth` and `videoHeight` as layout props; use a props JSON file for custom sizes.

## Requirements

- `git`
- `node`
- `corepack` or `pnpm`
- network access for clone/update and dependency install

Excerpt, first 3,090 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit b8818ac

Download folder ↗
git clone https://github.com/vibe-motion/skills
git -C skills checkout b8818ac5e0a0

The author documents no install command, so this uses the repository directly. Our verdict covers commit b8818ac5e0a0 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CodexMentioned in its text, not testedSkills for Codex · About Codex
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source b8818ac5e0a0

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/vibe-motion/wechat-2d-render/badge.svg)](https://modelsatlas.com/skills/vibe-motion/wechat-2d-render/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

threejs-earth-render✓SAFE

vibe-motion/skills

Clone or update https://github.com/vibe-motion/threejs-earth and render the Three.js Earth route animation with Puppeteer frame capture. Use when users ask for 三维地球航线动画, Three.js Earth, 地球飞线, globe route animation, or…

★ 1.4kGrade B
svg-assembly-animator✓SAFE

vibe-motion/skills

Clone or update https://github.com/nolangz/3D-Chladni and export deterministic 3D Chladni particle motion as MP4 or transparent ProRes MOV. Use when users ask for 3D 克拉尼, 克拉尼粒子动画, Chladni motion, sound-reactive sand or…

★ 1.4kGrade B
ruler-progress-render✓SAFE

vibe-motion/skills

Clone or update https://github.com/sxhzju/ruler-progress-animator and render a ruler progress video with default parameters. Use when users ask for requests like "绘制个尺子进度条", "做个尺子进度动画", "渲染 ruler progress", or ask to…

★ 1.4kGrade B
remotion-3d-ticker✓SAFE

vibe-motion/skills

Creates infinite 3D vertical scrolling ticker animations in Remotion. Use when you need to build a parallax gallery, infinite image scroll, multi-column continuous vertical scrolling effect, or a 3D photo wall (3D照片滚动墙…

★ 1.4kGrade B
procedural-fish-render✓SAFE

vibe-motion/skills

Clone or update https://github.com/vibe-motion/procedural-fish and render procedural-fish animation to a video using the project's own render command. Use when the user asks to render 程序鱼/procedural fish, export a…

★ 1.4kGrade B
light-spotlight-render✓SAFE

vibe-motion/skills

Generate a swinging spotlight text-reveal HTML animation with configurable text, swing angle, lamp scale, glow, and colors. Use when users ask for 聚光灯扫字动画, spotlight text reveal, light logo reveal, 发光文字揭示动画, or want a…

★ 1.4kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/vibe-motion/wechat-2d-render/badge.svg)](https://modelsatlas.com/skills/vibe-motion/wechat-2d-render/)

Questions about wechat-2d-render

What does the wechat-2d-render skill do?
agent skills for vibe motion
Is wechat-2d-render safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can wechat-2d-render access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
What do I need installed to use wechat-2d-render?
Its own instructions reference pnpm. Dependencies are pinned to exact versions.
Which assistants does wechat-2d-render work with?
Its documentation mentions codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (b8818ac5e0a0), read on 2026-10-28. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.