glslviewer-shader-debug
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
render_headless.shscript executes theglslViewercommand to process shader files. The path to the binary is determined viacommand -vor optionally controlled via theGLSLVIEWER_BINenvironment variable. - [COMMAND_EXECUTION]: The skill performs local file system operations, such as creating output directories and temporary frame folders using
mkdir -pandrm -rf, to manage rendered assets. - [SAFE]: Input validation is implemented for the
--sizeparameter inscripts/render_headless.sh, ensuring it conforms to the expectedWIDTHxHEIGHTformat via regular expression matching. - [SAFE]: No remote dependencies, external script downloads, or network operations are present; the skill depends on a locally installed renderer.
- [SAFE]: Indirect Prompt Injection Surface:
- Ingestion points: Shader source files (
.frag) provided as arguments toscripts/render_headless.sh. - Boundary markers: Absent.
- Capability inventory: Execution of
glslViewerand local file system access (read/write) viascripts/render_headless.sh. - Sanitization: Argument validation for dimensions and file existence checks are performed.
Audit Metadata