isometric-ops

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate design resources and utility scripts. All operations are documented and consistent with the stated purpose of managing isometric graphics.
  • [COMMAND_EXECUTION]: Included scripts use subprocess.run and shell commands for documented automation tasks. check-iso-facts.py uses curl to verify the status of relevant npm packages, and assets/blender-iso-rig.py is a script for the Blender Python API. These executions follow security best practices by avoiding shell interpolation of untrusted input.
  • [EXTERNAL_DOWNLOADS]: The check-iso-facts.py script performs network requests to the official npm registry (registry.npmjs.org) to check for package availability. This is a legitimate feature used for documentation maintenance.
  • [PROMPT_INJECTION]: The skill contains a library of prompt templates for AI image generators. These are provided as reference material for the user and do not contain instructions to override AI safety or agent behavior.
  • [DATA_EXPOSURE]: There is no access to or transmission of sensitive data such as credentials, system environment variables, or private keys.
  • [DYNAMIC_EXECUTION]: No unsafe use of eval(), exec(), or dynamic loading of external code was found. The Python scripts are standard implementations using recognized libraries like Pillow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:31 PM