pixijs-scene-container
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a technical reference for PixiJS v8. All code examples and instructions are consistent with legitimate use of the library.
- [INDIRECT_PROMPT_INJECTION]: The skill documents APIs that process external data, presenting a potential surface for indirect injection.
- Ingestion points: String-based search labels in getChildByLabel and asset URLs in Assets.load (SKILL.md).
- Boundary markers: The skill does not define specific boundaries or validation rules for these inputs.
- Capability inventory: The documented capabilities include scene graph manipulation, resource loading, and execution of per-frame update logic (SKILL.md).
- Sanitization: No input sanitization or validation methods are specified for the processed strings.
- [EXTERNAL_DOWNLOADS]: The skill includes links to official PixiJS documentation on pixijs.download, which is a well-known and expected service for this domain.
Audit Metadata