The Agent Skills Directory

[SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected during the audit of the skill instructions and scripts.
The tilemap editor (asset-tilemap-editor.mjs) initiates a local development server on the loopback address. It implements standard security practices for local tools, including a unique per-run authorization token to prevent cross-site access and path validation logic (isInside check) to ensure file modifications are restricted to the project root.
The bundled library (_lib/asset-tools.mjs) contains legitimate image processing, manifest parsing, and drawing logic. The Base64 encoded content found within this file was verified as binary data for font glyphs used in rendering debug information on images.
The skill is self-contained and does not fetch or execute remote code at runtime.

asset-pipeline