kenney-assets

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves HTML content and zip archives from kenney.nl, a reputable and well-known provider of game assets. The network operations are performed using standard Python libraries and target the official Kenney domain exclusively.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted web content which could serve as a vector for indirect prompt injection. 1. Ingestion points: The search and inspect functions in scripts/_kenney.py fetch and parse HTML content. 2. Boundary markers: The skill does not implement explicit boundary markers for scraped content, though the output is structured. 3. Capability inventory: File system write capabilities are present in the download function, which saves zip files to a user-provided directory. 4. Sanitization: HTML entities are unescaped using html.unescape before data is returned to the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 01:31 AM