spritecook-use-presets

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for managing presets through dedicated vendor tools (list_presets, get_preset_settings, and save_private_preset). These tools operate within the expected environment of the service vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from tool outputs to parameterize art generation requests, which represents a common surface for indirect prompt injection.
  • Ingestion points: Data returned by get_preset_settings, including prompt, themeText, and styleText fields.
  • Boundary markers: The skill does not define specific delimiters for the injected preset content.
  • Capability inventory: The skill utilizes generate_game_art and generate_tileset capabilities.
  • Sanitization: No explicit sanitization or filtering of the preset data is performed by the skill instructions before passing them to generation tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 03:25 AM
Security Audit — agent-trust-hub — spritecook-use-presets