joker-sims-parser
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate functionality for parsing game data files. No evidence of malicious behavior, data exfiltration, or obfuscation was found in the provided Go source files (main.go, interactive.go) or markdown documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a theoretical attack surface for indirect prompt injection by ingesting untrusted binary data from Sims save files (.package, .sims3pack, etc.). While the current implementation primarily outputs structured hex metadata, it represents a potential surface if crafted binary data were to influence the agent's behavior via output analysis.\n
- Ingestion points: File paths provided to the parse, list, and info commands in main.go and interactive.go are opened and read.\n
- Boundary markers: The tool formats its output using clear headers (e.g., '=== Sims Package Analysis ===') and dashed table separators.\n
- Capability inventory: The skill requires and uses read access to the local filesystem to process the target files.\n
- Sanitization: The tool extracts and displays raw hexadecimal values and resource counts; it does not implement specific sanitization for string-based metadata fields that might contain instructions.
Audit Metadata