tesseract-3d

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the download and execution of the Tesseract CLI and installation scripts (install.sh, install.ps1) from the vendor's GitHub repository (mirage-hq/tesseract). These are vendor-owned resources used to provide the skill's primary functionality.
  • [COMMAND_EXECUTION]: Included Python helper scripts (tesseract_media.py, tesseract_sound.py) execute shell commands using subprocess.run to interface with local media tools like FFmpeg and ffprobe for audio synthesis, loudness measurement, and media inspection.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a "Critic Review" workflow where sub-agents evaluate deliverables based on untrusted user input provided in a brief.md file.
  • Ingestion points: Untrusted user requests are ingested into brief.md and read by critic agents (references/critic-review.md).
  • Boundary markers: Critic agents are instructed to read the brief first, but no explicit delimiters or instructions to ignore embedded malicious commands are present.
  • Capability inventory: The main agent possesses capabilities for file system modification (tsrct commit) and command execution (ffmpeg), while the critics are instructed to avoid project-mutating commands.
  • Sanitization: No sanitization or validation of the user-provided brief is documented before ingestion by the sub-agents.
  • [DYNAMIC_EXECUTION]: The skill enables the authoring and execution of custom fragment shaders using WGSL (WebGPU Shading Language) for visual effects (references/custom-shader.md). These shaders are compiled and executed by the Tesseract rendering engine at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 10:19 PM