megadev-assets
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides instructions for users to run Docker commands and Python scripts to build the project and process assets. These commands utilize local bind mounts for workspace access.
- [EXTERNAL_DOWNLOADS]: The toolchain references a Docker image (
ewrogers/megadev:latest) hosted on Docker Hub, which is used to compile the project. This is a vendor-owned resource associated with the skill author. - [SAFE]: The Python scripts for image processing and project initialization use standard libraries (Pillow, shutil, hashlib) to perform their tasks. These scripts operate locally and do not engage in unauthorized network activity or sensitive data access.
Audit Metadata