sprite-animation-assets
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/compose_sprite_set.py) designed to automate image processing. The script uses the standardargparse,json, andpathlibmodules, along with the well-knownPillow(PIL) library for image manipulation. It strictly performs file I/O and image compositions based on a provided JSON manifest and does not execute arbitrary shell commands or external binaries. - [EXTERNAL_DOWNLOADS]: No patterns of remote script execution (e.g., piping curl to bash) or external downloads were detected. The script assumes dependencies like Pillow are already available in the environment.
- [DATA_EXFILTRATION]: There are no network-capable commands or attempts to access sensitive system directories (e.g., .ssh, .aws). The script only interacts with the directories explicitly provided via command-line arguments.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdare purely task-oriented, providing guidelines for maintaining visual consistency in sprite animations. There are no attempts to bypass LLM safety filters or hijack the system prompt.
Audit Metadata