pixi
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch documentation from
https://pixijs.download/release/docs/llms.txt. This domain is the official distribution infrastructure for the PixiJS open-source project and is used to provide machine-readable API documentation. - [INDIRECT_PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection by instructing the agent to ingest external documentation via WebFetch.
- Ingestion points:
SKILL.mddefines a fallback process to fetch thellms.txtindex and subsequent.html.mdfiles from the official PixiJS download site. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the fetched content.
- Capability inventory: This specific router skill does not contain executable scripts, subprocess calls, or file-system write operations; it acts primarily as a documentation and context provider.
- Sanitization: There is no explicit sanitization or validation of the fetched documentation content described in the skill instructions.
Audit Metadata