cartoon-style
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
runpy.run_pathin the Python recipe to execute scripts stored in sibling directories (e.g.,stylized-style,lighting,rendering). This is a standard method for modular code execution within the agent's local environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a
targetvariable used to identify 3D assets to be styled. - Ingestion points:
targetvariable used in the Python snippet withinSKILL.md. - Boundary markers: No delimiters or safety instructions are used for the
targetinput. - Capability inventory: Calls
runpy.run_pathto executetoon_material.py,light_rig.py,render_preset.py, andcomp_grade.py. - Sanitization: No explicit sanitization of the
targetstring before it is passed to scripts. - [METADATA_POISONING]: The YAML frontmatter lists a different author profile (
arjun988) than the reported vendor. This inconsistency is common in shared or forked repositories and does not present a safety risk.
Audit Metadata