skyrim-distribution-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted configuration files through its auditing and generation pipeline, which serves as a potential vector for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The
scripts/audit_configs.pyscript reads the content of configuration files (INI, JSON, TOML, YAML) provided in the target directory to verify encoding and structural integrity. - Boundary markers: Absent. The instructions do not define delimiters or provide warnings to the agent to ignore embedded natural language instructions within the audited data.
- Capability inventory: The skill possesses file system read access for auditing and relies on external scripts for generation and log analysis. It does not demonstrate network exfiltration, arbitrary command execution from untrusted input, or privilege escalation capabilities.
- Sanitization: Absent. The audit script focuses on technical validation (BOM, newlines, duplicate lines) but does not sanitize or filter the textual content for adversarial prompt patterns.
- [SAFE]: The skill provides links to official GitHub repositories for established Skyrim modding frameworks, including Spell-Perk-Item-Distributor (SPID), Keyword-Item-Distributor (KID), and SkyPatcher. These references are used for documentation and syntax compliance.
Audit Metadata