bevy-game-engine
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
cargo generateto fetch a project template from a remote repository athttps://github.com/TheBevyFlock/bevy_new_2d. This involves downloading external code from a source outside of the pre-approved trusted vendor list. - [INDIRECT_PROMPT_INJECTION]: The recommendation to import external project templates creates a potential surface for indirect prompt injection if the remote repository contains malicious instructions designed to influence the agent's behavior during the development process.
- Ingestion points: Remote git repository template (
SKILL.md). - Boundary markers: None provided for the downloaded template content.
- Capability inventory: The skill utilizes
Bash(cargo *)which allows for the initialization and execution of code within the downloaded template. - Sanitization: The skill does not implement or describe any validation or sanitization steps for the remote template content before it is used.
Audit Metadata