game-icons-assets
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the repository tree and individual SVG files from GitHub (api.github.com and raw.githubusercontent.com). These are well-known services and the skill uses specific, hardcoded paths to the game-icons/icons repository.
- [INDIRECT_PROMPT_INJECTION]: The skill processes icon metadata from a remote repository. 1. Ingestion points: Remote file tree fetched in scripts/_game_icons.py. 2. Boundary markers: Absent. 3. Capability inventory: File system write in scripts/_game_icons.py. 4. Sanitization: Input icon_path is validated against the official repository tree list.
- [SAFE]: No malicious patterns detected. The skill uses standard secret management for API authentication and restricts file downloads to a verified list of assets from a trusted source.
Audit Metadata