megadev-testing

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/capture_console.py uses subprocess.run to invoke the host ffmpeg executable for capturing console video frames. The script implements strict input validation on the device name (blocking colons and control characters) to prevent command injection.
  • [DYNAMIC_EXECUTION]: The QA tool assets/test-lab/tools/verify_replay.py dynamically compiles a portable C test fixture using the host compiler (gcc, clang, or cc) and subsequently executes the generated binary to perform replay assertions. This is an intended function for local code verification.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests the use of the ewrogers/megadev:latest Docker image for building projects. This image is a vendor-owned resource from the skill author and is standard for the Megadev SDK environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves processing and compiling user-provided Sega CD project source code. While this creates an attack surface typical of development tools, the skill maintains bounded execution and primarily targets developer-controlled environments.
  • Ingestion points: User-specified project directories and ISO images analyzed via scripts/disc.py.
  • Boundary markers: None (standard developer tool).
  • Capability inventory: Local file writes, C compilation (verify_replay.py), and video capture via ffmpeg (capture_console.py).
  • Sanitization: Project IDs and titles are validated against regular expressions in scripts/create_project.py.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:47 PM