pixi-vn-saves
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
@drincs/pixi-vnlibrary and thepixi-vnproject creation tool. These resources are official packages maintained by the skill's author (drincs-productions) and are necessary for the skill's intended functionality. - [INDIRECT_PROMPT_INJECTION]: The skill describes a mechanism for loading game state from external JSON files via
loadGameSaveFromFile, which introduces a potential surface for processing untrusted data. - Ingestion points: External save data is imported into the application state from local files or browser storage.
- Boundary markers: The skill relies on standard JSON parsing and structural object mapping, though it does not provide specific delimiters for the LLM to differentiate between state data and instructions.
- Capability inventory: The restoration process is limited to modifying in-game variables, canvas layers, and audio states. It does not include high-risk capabilities such as shell command execution or arbitrary network operations based on the loaded data.
- Sanitization: Data integrity is checked through structural parsing using
Game.jsonToGameState(a wrapper forJSON.parse).
Audit Metadata