sprite-sheet

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known game development tools (e.g., TexturePacker, Aseprite) and reputable asset sources like Kenney.nl. It also includes an HTML example that loads a support script from the official Macroquad sample repository.
  • [COMMAND_EXECUTION]: The documentation provides standard shell command examples for asset management (e.g., tar, convert, find) and build instructions for Rust (cargo build). These are informational and intended for manual developer use.
  • [INDIRECT_PROMPT_INJECTION]: The unity_meta_parser.py script is designed to process external Unity .meta files.
  • Ingestion points: The script reads path-specified .meta files in unity_meta_parser.py.
  • Boundary markers: None.
  • Capability inventory: The script generates JSON or Rust code blocks to stdout.
  • Sanitization: The script correctly uses yaml.safe_load() to prevent arbitrary code execution during the parsing of potentially untrusted YAML data.
  • [DATA_EXPOSURE]: Documentation and example files include absolute local directory paths (e.g., /Volumes/workspace/Last Infinity/Assets/...). While these reveal internal project structures, they do not contain sensitive system paths or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 01:35 AM