megadev-testing
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/capture_console.pyusessubprocess.runto invoke the hostffmpegexecutable for capturing console video frames. The script implements strict input validation on the device name (blocking colons and control characters) to prevent command injection. - [DYNAMIC_EXECUTION]: The QA tool
assets/test-lab/tools/verify_replay.pydynamically compiles a portable C test fixture using the host compiler (gcc,clang, orcc) and subsequently executes the generated binary to perform replay assertions. This is an intended function for local code verification. - [EXTERNAL_DOWNLOADS]: The documentation suggests the use of the
ewrogers/megadev:latestDocker image for building projects. This image is a vendor-owned resource from the skill author and is standard for the Megadev SDK environment. - [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves processing and compiling user-provided Sega CD project source code. While this creates an attack surface typical of development tools, the skill maintains bounded execution and primarily targets developer-controlled environments.
- Ingestion points: User-specified project directories and ISO images analyzed via
scripts/disc.py. - Boundary markers: None (standard developer tool).
- Capability inventory: Local file writes, C compilation (
verify_replay.py), and video capture viaffmpeg(capture_console.py). - Sanitization: Project IDs and titles are validated against regular expressions in
scripts/create_project.py.
Audit Metadata