bpcore-engine
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official GitHub repository for the BPCore Engine as the source for obtaining the required engine base and build scripts.
- [COMMAND_EXECUTION]: The documentation includes instructions for running standard development tools such as git, lua, ffmpeg, and the mGBA emulator for project setup, building, and testing.
- [INDIRECT_PROMPT_INJECTION]: The skill involves a workflow for creating a Gameboy Advance ROM by aggregating user-provided asset files and Lua scripts.
- Ingestion points: Resource files and scripts referenced in the manifest.lua and project structure.
- Boundary markers: Not present; the build system assumes trusted local files.
- Capability inventory: The workflow utilizes shell commands for file cloning (git), audio conversion (ffmpeg), and ROM generation (lua).
- Sanitization: Not applicable to the documented local build process.
Audit Metadata