megadev-graphics

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and build scripts recommend pulling a Docker image (ewrogers/megadev:latest) to provide a consistent development and build environment. This resource is owned by the skill's author and is central to its intended technical purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes Python scripts such as scripts/disc.py, tools/verify_prepared.py, and tools/asset_codec.py that are designed to parse and validate external data, including ISO9660 images and binary graphics assets. While these tools process untrusted input, the analysis shows they are limited to data verification and transformation without high-risk capabilities such as arbitrary shell execution or network exfiltration of the processed content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:47 PM