console-backend
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of runtime logs from the PS2Recomp execution environment.
- Ingestion points: The
stubs.pyscript reads logs fromconsole/runs/*.logand source files from a provided repository path. - Boundary markers: The script uses specific regular expressions to parse known log formats rather than treating the entire log content as instructions.
- Capability inventory: The included Python script is read-only and does not possess file-writing, network-access, or subprocess-execution capabilities.
- Sanitization: Data is validated against strict regex patterns (e.g., matching PC/RA hex addresses and specific error strings) before being reported to the agent.
- [SAFE]: The skill's behavior matches its stated purpose as a backend engineering aid. It adheres to best practices by maintaining read-only access to the user's repository and logs, and it includes explicit guardrails against processing or requesting copyrighted game assets.
Audit Metadata