glslviewer-shader-debug

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The render_headless.sh script executes the glslViewer command to process shader files. The path to the binary is determined via command -v or optionally controlled via the GLSLVIEWER_BIN environment variable.
  • [COMMAND_EXECUTION]: The skill performs local file system operations, such as creating output directories and temporary frame folders using mkdir -p and rm -rf, to manage rendered assets.
  • [SAFE]: Input validation is implemented for the --size parameter in scripts/render_headless.sh, ensuring it conforms to the expected WIDTHxHEIGHT format via regular expression matching.
  • [SAFE]: No remote dependencies, external script downloads, or network operations are present; the skill depends on a locally installed renderer.
  • [SAFE]: Indirect Prompt Injection Surface:
  • Ingestion points: Shader source files (.frag) provided as arguments to scripts/render_headless.sh.
  • Boundary markers: Absent.
  • Capability inventory: Execution of glslViewer and local file system access (read/write) via scripts/render_headless.sh.
  • Sanitization: Argument validation for dimensions and file existence checks are performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 06:58 AM