sprite-sheet
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several well-known game development tools (e.g., TexturePacker, Aseprite) and reputable asset sources like Kenney.nl. It also includes an HTML example that loads a support script from the official Macroquad sample repository.
- [COMMAND_EXECUTION]: The documentation provides standard shell command examples for asset management (e.g., tar, convert, find) and build instructions for Rust (cargo build). These are informational and intended for manual developer use.
- [INDIRECT_PROMPT_INJECTION]: The unity_meta_parser.py script is designed to process external Unity .meta files.
- Ingestion points: The script reads path-specified .meta files in unity_meta_parser.py.
- Boundary markers: None.
- Capability inventory: The script generates JSON or Rust code blocks to stdout.
- Sanitization: The script correctly uses yaml.safe_load() to prevent arbitrary code execution during the parsing of potentially untrusted YAML data.
- [DATA_EXPOSURE]: Documentation and example files include absolute local directory paths (e.g., /Volumes/workspace/Last Infinity/Assets/...). While these reveal internal project structures, they do not contain sensitive system paths or credentials.
Audit Metadata