megadev-audio
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for building projects using Docker. The commands reference the
ewrogers/megadevimage, which is a resource provided by the skill's author. - [EXTERNAL_DOWNLOADS]: The project build process involves pulling the
ewrogers/megadev:latestimage from Docker Hub. This is a vendor-owned resource used for the intended purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill includes Python scripts (
disc.py,inspect_disc.py,verify_art.py) that parse and validate external binary data, such as ISO9660 images and custom MDA art files. These scripts implement robust validation, including CRC32 checksums, magic number verification, and strict size constraints, effectively mitigating risks associated with processing untrusted data.
Audit Metadata