megadev-collision
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
assets/collision-lab/tools/check_collision.pyscript utilizessubprocess.runto executemake_art.pyand invoke the host C compiler (such as clang or gcc) to build validation binaries. - [COMMAND_EXECUTION]: The
assets/collision-lab/README.mdfile contains instructions for building the project using theewrogers/megadev:latestDocker image. - [DYNAMIC_EXECUTION]: The validation tool
assets/collision-lab/tools/check_collision.pyperforms runtime compilation of the project's C source files and executes the resulting binaries to verify collision math and contracts across different optimization levels. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes geometric data from
assets/collision-lab/res/layouts.json. Thetools/make_art.pyscript parses this JSON to generate art assets and C header files. - Ingestion points:
assets/collision-lab/res/layouts.jsonconsumed bytools/make_art.py. - Boundary markers: None identified.
- Capability inventory: File writing in
make_art.py; subprocess execution and compilation incheck_collision.py. - Sanitization:
make_art.pyperforms basic range checks on wall counts and coordinate bounds.
Audit Metadata