pixijs-rendering
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches example texture assets from the official PixiJS website (pixijs.com).
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for loading external assets which could serve as a vector for untrusted data ingestion.
- Ingestion points:
Assets.load(url)andAssets.add()inSKILL.mdandreferences/assets-and-display.md. - Boundary markers: No specific delimiters or safety warnings regarding the source of asset URLs are included.
- Capability inventory: The skill uses the PixiJS API to manipulate the web canvas and manage asset memory. It does not perform sensitive operations like file system writes, shell command execution, or access to environment credentials.
- Sanitization: No validation or sanitization of external URLs is present in the provided code examples.
Audit Metadata