pixi-vn-getting-started
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install official framework packages (@drincs/pixi-vn) and industry-standard peer dependencies (pixi.js, tone, motion, vite) from the npm registry. These are verified vendor resources and well-known services.
- [COMMAND_EXECUTION]: Includes instructions for project scaffolding using "npm create pixi-vn@latest", which is a standard and expected method for bootstrapping modern web development environments.
- [INDIRECT_PROMPT_INJECTION]: The framework ingests narrative content from project files and scripts. Ingestion points: files under src/content/ and .ink scripts. Boundary markers: present as framework-specific Label and Character structures that delimit content. Capability inventory: standard npm commands, file writes for type generation, and local dev-server communication. Sanitization: managed by the engine's internal registries and Vite SSR loaders.
- [DYNAMIC_EXECUTION]: Documents the use of Vite-specific features such as ssrLoadModule and import.meta.glob to dynamically load project content and assets during development. These practices are scoped to the local environment and are standard for the tool's intended purpose.
Audit Metadata