pokemon-player
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
pokemon-agentpackage from the NousResearch/pokemon-agent GitHub repository. NousResearch is a well-known organization in the AI research community. - [COMMAND_EXECUTION]: The skill uses local shell commands to manage the game environment, including starting the
pokemon-agentserver and establishing an SSH reverse tunnel vialocalhost.run. The use oflocalhost.runis a standard method for exposing a local port to a public URL for viewing the dashboard. The instructions also specify writing temporary files to/tmp/pokemon.pngfor vision analysis. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection as it processes external game data.
- Ingestion points: The agent reads game state via
GET /stateand processes screenshots of the emulator viaGET /screenshot(SKILL.md). - Boundary markers: There are no specific boundary markers or instructions to ignore data embedded within the game visuals or RAM state.
- Capability inventory: The skill can execute CLI tools (
ssh,pokemon-agent), write files to the local filesystem (/tmp/pokemon.png), and interact with local network services (SKILL.md). - Sanitization: No explicit sanitization or filtering is performed on the game state data before it is processed by the vision model.
Audit Metadata