skyrim-container-distribution
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a linter script (
scripts/lint_cdf_json.py) that processes external JSON files. While this represents a data ingestion surface, the script's functionality is limited to schema validation and reporting errors to the console. It does not execute the contents of the JSON files or pass them into dangerous sinks, effectively mitigating the risk of injection. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill references a specific GitHub repository (
SeaSparrowOG/DynamicContainerInventoryFramework) and commit for version locking, but it does not attempt to download or execute code from this or any other remote source at runtime. - [DATA_EXFILTRATION]: No network operations or data exfiltration attempts were found. The skill's operations are confined to the local filesystem, specifically targeting Skyrim-related game directories, and it does not include tools for transmitting data over the network.
- [COMMAND_EXECUTION]: The skill provides a script for linting JSON files. The execution of this script is restricted to local path processing using standard libraries and does not involve spawning shells or executing arbitrary system commands.
Audit Metadata