asset-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill consists of multiple Node.js scripts that perform file system operations (read/write PNGs and JSON/Lua manifests). These operations are standard for the stated purpose of an asset pipeline and include a local web server for a map editor.
- [INDIRECT_PROMPT_INJECTION]: The scripts ingest external data from the local filesystem, such as PNG image data and asset manifests (JSON/Lua). While this represents a surface for processing untrusted data, the skill implements path sanitization to ensure file operations stay within the intended workspace, and the custom Lua parser is built with a focused, non-executable grammar.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The
asset-tilemap-editor.mjstool starts a local HTTP server on the loopback address (127.0.0.1). This server is protected by a per-session UUID token generated at runtime, preventing unauthorized access by other local processes.
Audit Metadata