game-asset-generator
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions and images to generate assets via external APIs, which creates a surface for indirect prompt injection. Ingestion points: User prompts and reference image URLs. Boundary markers: Absent. Capability inventory: Network requests to generation APIs, file system writes to asset directories, and shell command execution for model optimization. Sanitization: Relies on safety filters provided by external service endpoints.
- [COMMAND_EXECUTION]: The skill includes a utility script (optimize-glb.mjs) that executes the gltf-transform CLI tool to post-process 3D models.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloads of game assets from official API endpoints and well-known repositories such as Meshy, fal.ai, World Labs, and Sketchfab.
Audit Metadata