pixijs
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch supplementary API documentation from
https://pixijs.download, which is the official infrastructure for the PixiJS project. This is a well-known service and the reference is handled neutrally. - [COMMAND_EXECUTION]: The documentation includes standard commands for scaffolding new projects using the official
create-pixiutility via npm, yarn, pnpm, and bun. These instructions follow standard development practices for the PixiJS ecosystem. - [NO_CODE]: The skill consists entirely of Markdown documentation and configuration files. It does not include any executable script files (e.g., .js, .py, .sh) or binaries.
- [SAFE]: No security threats such as prompt injection, hardcoded credentials, or malicious obfuscation were found during the analysis. The usage of
pixi.js/unsafe-evalis documented correctly as a necessary polyfill for environments with strict Content Security Policies (CSP), not as an attempt to introduce insecure behavior.
Audit Metadata