nixie-fx-authoring
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
nixie-fxCLI tool vianpxto perform core tasks such as effect creation, project validation, and runtime data export. These commands are integral to the skill's stated purpose of VFX authoring. - [EXTERNAL_DOWNLOADS]: The skill employs
npxto download and execute thenixie-fxpackage from the public NPM registry. This is the standard method for accessing the required specialized tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled project manifests and effect data. It mitigates potential path traversal or injection risks by providing explicit instructions to use only relative paths and strictly forbidding the use of directory traversal segments (e.g.,
..).
Audit Metadata