rmmz-scene
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
rmmz-sceneCLI tool from the author's GitHub repository (github.com/lemonhall/rmmz-scene-registry.git) viauv tool install. This is an expected download from a vendor-owned resource. - [COMMAND_EXECUTION]: Multiple shell commands are utilized to manage project scenes. The instructions mitigate risks by requiring the agent to perform dry-runs and obtain user authorization before applying any changes to the project files.
- [DATA_EXFILTRATION]: The skill reads local RPG Maker project metadata and communicates with a scene registry. It explicitly warns against including absolute local project paths in public registry data to prevent sensitive information disclosure.
- [PROMPT_INJECTION]: The skill ingests external data from registry queries and project manifests. It implements protective measures by mandating structured JSON parsing, manifest inspection, and verification of applied changes, following the mandatory evidence chain for indirect injection risks.
Audit Metadata