driving-bevy-games
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include a
cargo installcommand to fetch thebevy-agent-feedback-pluginfrom the Crates.io registry. This is a standard method for installing Rust-based development tools and is considered a safe operation within the context of a developer skill. - [COMMAND_EXECUTION]: The
bevy_feedback.pyclient usessubprocess.runto call the Tesseract OCR engine. The executable path defaults to 'tesseract' but can be overridden by theBEVY_FEEDBACK_TESSERACTenvironment variable. The call uses a list of arguments rather than a shell string, mitigating shell injection risks. - [COMMAND_EXECUTION]: The
SKILL.mdfile provides commands for the agent to execute, includingcargo build,cargo run, and a wrapper toolbevy-feedbackto orchestrate the game and its driver script. These are intended behaviors for a testing and automation framework.
Audit Metadata