webgpu-specs
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches specification files from the gpuweb GitHub repository. These downloads are used to provide local reference material for WebGPU and WGSL development.
- [COMMAND_EXECUTION]: The skill uses a shell script to automate the download process. It retrieves the project's target directory via cargo metadata and uses curl with ETag support to efficiently update local copies of the specifications.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external specification files. 1. Ingestion points: target/claude/webgpu-spec.bs and target/claude/wgsl-spec.bs. 2. Boundary markers: None. 3. Capability inventory: Bash script execution for downloading, no execution of fetched data. 4. Sanitization: None.
Audit Metadata