fal-gamedev

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation references and requires the genmedia CLI, which is hosted on the author's official GitHub repository (fal-ai-community/genmedia-cli). This is a legitimate dependency for the skill's operations.
  • [COMMAND_EXECUTION]: The skill utilizes Bash commands to interact with the genmedia tool for generating assets (genmedia run), checking job status (genmedia status), and downloading results. It also uses standard filesystem commands (mkdir -p) to organize generated files into a structured directory (./game-assets/). All commands are scoped to the project's local directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text descriptions to generate character art and backgrounds. It interpolates these descriptions into detailed prompt templates. While this represents a surface for indirect prompt injection, the instructions include specific boundary markers and stylistic constraints to ensure the output remains focused on the intended 2D game asset generation task.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:59 PM