console-graphics
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate graphics analysis and modification tasks. The included Python scripts (
tim2.py,widescreen.py,gspacket.py) rely entirely on the Python standard library (such asstruct,zlib, andargparse) to handle binary file formats. No evidence of credential harvesting, network exfiltration, or unauthorized command execution was detected. - [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted binary data from user-provided game files, the risk is negligible due to the nature of the processing.
- Ingestion points: Binary data is ingested from local game files (ELFs, TIM2 textures) and RAM dumps (
console/dumps/*.bin). - Boundary markers: Not applicable, as the scripts perform structured binary parsing rather than natural language interpretation of the file content.
- Capability inventory: The scripts are limited to local file system operations (reading and writing textures/patches) and do not have network access or the ability to execute arbitrary shell commands.
- Sanitization: The tools use strict binary schema validation (magic bytes, header sizes, and fixed-width fields) to process data, preventing malicious content in the files from influencing agent behavior.
Audit Metadata