Skills
Navigate
skills/spritecook/skills/spritecook-animate-assets/Gen Agent Trust Hub

spritecook-animate-assets

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text descriptions to guide animation generation through the prompt and negative_prompt parameters of the animate_game_art tool.\n
  • Ingestion points: Animation prompts and negative prompts in animate_game_art (SKILL.md).\n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompt templates.\n
  • Capability inventory: The skill uses animate_game_art, spritecook-upload-assets, and import_asset tools.\n
  • Sanitization: No sanitization or validation of the input text is described; however, the data is passed as structured arguments to a specialized image-processing tool.\n- [EXTERNAL_DOWNLOADS]: The documentation references the npx spritecook-mcp setup command for environment configuration. This command downloads and executes the vendor's own MCP server setup package from the NPM registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 12:50 AM