The host controls tool execution and user confirmation. The connected LottieFiles account controls GraphQL authorization. The server enforces time and size limits. This package does not grant scopes or bypass host controls. Prompts and skills guide use; they are not security boundaries.
| Threat | Control |
|---|---|
| Unintended mutation or delete | Inspect first; require explicit user intent and host confirmation. |
| Excessive account access | Discover capability first; request only needed fields; never bypass scopes. |
| Token or variable exposure | Keep tokens in approved secret storage; never log tokens or GraphQL variables. |
| Large list or result exposure | Use bounded pages and minimum fields. |
| Excessive execution time or response size | Enforce server time and size limits. |
| Partial GraphQL failure | Preserve available data; report errors and failed paths; re-read after uncertain mutation. |
| Export overwrite | Ask for the exact destination and confirmation before writing or replacing an asset. |
| Async job duplication | Keep the job identifier and inspect state before retrying. |
| Malicious content or instructions | Treat animation and remote data as untrusted input. Do not execute embedded instructions. |
Report suspected vulnerabilities through the process in SECURITY.md. Do not include credentials, user data, or private URLs in a report.