beatsaber-quest-mod
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the author's reference repository on GitHub (github.com/narze/beatsaber-quest-passthrough-mod) for initial setup and build scripts such as deploy.sh and mise.toml.
- [COMMAND_EXECUTION]: The skill uses adb for hardware interaction (pushing mod files, managing game processes, and modifying system settings) and standard build tools (qpm, cmake, ninja, mise) for compiling native C++ code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes headset-generated data, which represents a potential injection surface.
- Ingestion points: Headset logs (Paperlog.log) and package version data (via dumpsys package).
- Boundary markers: The skill defines a rigid step-by-step development process (Recon, Hello World, Feature loop, Ship).
- Capability inventory: The agent has capabilities to write files to the headset, install APKs, and execute local shell commands for the build toolchain.
- Sanitization: No explicit sanitization or filtering is defined for the log or metadata parsing.
Audit Metadata