The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/flash/swf_assets.py executes the external tool ffdec using subprocess.run. The command is constructed as a list of arguments, which is a secure practice that prevents shell injection.
[EXTERNAL_DOWNLOADS]: The documentation points to reputable external sources for necessary tools (e.g., the JPEXS Free Flash Decompiler on GitHub). These references are informative and do not involve automated execution of untrusted code.
[INDIRECT_PROMPT_INJECTION]: The utility scripts ingest data from game engine project files (such as .unity, .tscn, or .rbxlx files). The analysis shows that these files are parsed using safe, deterministic methods (regex and standard library parsers), posing no significant threat of command or instruction injection from the data source.

bevy-porting