spritecook-use-presets
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for managing presets through dedicated vendor tools (
list_presets,get_preset_settings, andsave_private_preset). These tools operate within the expected environment of the service vendor. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from tool outputs to parameterize art generation requests, which represents a common surface for indirect prompt injection.
- Ingestion points: Data returned by
get_preset_settings, includingprompt,themeText, andstyleTextfields. - Boundary markers: The skill does not define specific delimiters for the injected preset content.
- Capability inventory: The skill utilizes
generate_game_artandgenerate_tilesetcapabilities. - Sanitization: No explicit sanitization or filtering of the preset data is performed by the skill instructions before passing them to generation tools.
Audit Metadata