megadev-graphics
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation and build scripts recommend pulling a Docker image (
ewrogers/megadev:latest) to provide a consistent development and build environment. This resource is owned by the skill's author and is central to its intended technical purpose. - [INDIRECT_PROMPT_INJECTION]: The skill includes Python scripts such as
scripts/disc.py,tools/verify_prepared.py, andtools/asset_codec.pythat are designed to parse and validate external data, including ISO9660 images and binary graphics assets. While these tools process untrusted input, the analysis shows they are limited to data verification and transformation without high-risk capabilities such as arbitrary shell execution or network exfiltration of the processed content.
Audit Metadata