optiscaler-client-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill documents a legitimate open-source utility for game enhancement. The architectural patterns and code examples provided are consistent with the tool's stated purpose of automating mod installation and configuration.
- [INDIRECT_PROMPT_INJECTION]: The application described has a potential attack surface as it ingests untrusted data from multiple sources including local game manifests, INI configuration profiles, and external APIs.
- Ingestion points: The logic processes Steam
appmanifest_*.acffiles,libraryfolders.vdffiles, user-modifiable INI profiles, and JSON responses from the SteamGridDB API. - Boundary markers: No specific prompt boundary markers are used in the documentation, as the tool primarily processes structured data via standard programming interfaces rather than natural language instructions.
- Capability inventory: The tool possesses capabilities for file system modification (
File.Copy,File.WriteAllBytes,Directory.CreateDirectory), network operations (HttpClient), and management of DLL injection methods for games. - Sanitization: The provided code demonstrates the use of structured data parsers (JSON, VDF, INI) which inherently mitigates many injection risks by ensuring external data adheres to expected schemas before processing.
- [EXTERNAL_DOWNLOADS]: The skill references downloads for application binaries and components hosted on GitHub. These references are appropriate for the tool's primary purpose and leverage a well-known service for distribution. The downloads originate from repositories that match the project's identity.
Audit Metadata