layer-pixel-art
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill advocates for an iterative workflow where a generated image is approved and then used as a
reference_imagefor subsequent generations to maintain consistency. This creates a data flow where the output of one AI task is used as input for the next, which is a common attack surface for indirect prompt injection. - Ingestion points:
reference_imageand pose descriptions (SKILL.md). - Boundary markers: The skill instructs to specify strict grid sizes (e.g., 32x32) and palette limits (e.g., 16-colors) to constrain output.
- Capability inventory: Image generation,
pack_sprite_sheet, andsplit_sprite_sheetutilities. - Sanitization: The skill does not explicitly describe input sanitization; it relies on model parameters like
negative_promptto filter unwanted attributes. - [COMMAND_EXECUTION]: The documentation includes a command
npx skills add layerai/skillsintended for environment setup. This targets the author's own repository to provide additional tools necessary for the pixel art workflow.
Audit Metadata