foundry-vtt-system-dev
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documents the standard Foundry VTT pattern for creating hotbar macros in
references/advanced-system-features.md. This involves generating a JavaScript string that is saved as a Macro document. The generated code uses the system's own UUID-based resolution (fromUuidSync) and calls the item's own roll method, which is a routine and safe use of the platform's API. - [INDIRECT_PROMPT_INJECTION]: The skill implements rich text rendering using Foundry's
TextEditor.enrichHTMLinboilerplate/sheets/character-sheet.mjs. While this processes potentially untrusted HTML content for character biographies, it uses the platform's built-in sanitization and enrichment engine, which is the standard and expected method for handling rich text in this environment. - [DATA_EXFILTRATION]: No evidence of unauthorized network operations or sensitive data access was found. Manifest and download URLs in the documentation use placeholder values or target expected developer repositories, consistent with the skill's purpose for scaffolding new projects.
Audit Metadata