pixi-vn-ink-canvas
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external .ink files, which represents an indirect prompt injection surface.
- Ingestion points: Interprets content from .ink script files referenced in the instructions.
- Boundary markers: None specified for the script content.
- Capability inventory: Limited to canvas element manipulation (rendering, animating, and removing visual components) via the @drincs/pixi-vn-json library. No system-level or network capabilities are exposed.
- Sanitization: Not explicitly detailed in the documentation.
- [SAFE]: The skill uses standard instructional patterns and contains no obfuscation, credential exposure, or unauthorized command execution. All external references and packages are associated with the official vendor or established development tools.
Audit Metadata