game-assets
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate game development functionality for planning and asset generation, supporting various art styles (Pixel, HD) and asset types (Sprites, UI, Maps, Audio).
- [SAFE]: Credential management instructions emphasize safe practices, directing users to store API keys in environment variables or Git-ignored
.envfiles to prevent leakage. - [SAFE]: The local preview scripts (
map-preview-server.py,build-map-preview.py) incorporate several defensive coding practices: - Strict file-type allowlisting restricted to image formats (PNG, WebP).
- Verification of image file headers (e.g., PNG magic bytes) to prevent serving non-image data.
- Binding the preview server to the loopback interface (
127.0.0.1) only. - Implementation of strict Content Security Policy (CSP) headers and automated shutdown timers.
- [EXTERNAL_DOWNLOADS]: The skill includes functionality to search and download map/texture references and templates from the official vendor domain (
meowa.ai). These operations are intended, authenticated, and restricted to vendor-provided assets.
Audit Metadata