fal-gamedev
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references and requires the
genmediaCLI, which is hosted on the author's official GitHub repository (fal-ai-community/genmedia-cli). This is a legitimate dependency for the skill's operations. - [COMMAND_EXECUTION]: The skill utilizes Bash commands to interact with the
genmediatool for generating assets (genmedia run), checking job status (genmedia status), and downloading results. It also uses standard filesystem commands (mkdir -p) to organize generated files into a structured directory (./game-assets/). All commands are scoped to the project's local directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text descriptions to generate character art and backgrounds. It interpolates these descriptions into detailed prompt templates. While this represents a surface for indirect prompt injection, the instructions include specific boundary markers and stylistic constraints to ensure the output remains focused on the intended 2D game asset generation task.
Audit Metadata