gsplat-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references and provides instructions for cloning the
scier/MetalSplatterrepository on GitHub as a reference implementation. It also suggests installing thesogspackage via pip.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied 3D scene files (.ply and .splat), creating a surface for indirect prompt injection.\n - Ingestion points: The
scripts/analyze_splat.pyscript reads binary data from external files provided by the user.\n - Boundary markers: There are no explicit instructions or delimiters used to separate user data from agent instructions.\n
- Capability inventory: The utility script is restricted to data processing and logging; it does not have network access, file write permissions, or the ability to execute arbitrary system commands.\n
- Sanitization: The script performs structural validation of the input files by checking the PLY header format.
Audit Metadata