creature-animation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates animation tasks by executing local Python scripts (e.g.,
pipeline.py,unity_install.py,subject_report.py) and project-specific commands in Blender and Unity. These actions are confined to the intended automation pipeline and follow strict workflows. - [EXTERNAL_DOWNLOADS]: The skill uses
gitto synchronize assets with the vendor's repository atgithub.com/TheOrcDev/finalstand.git. This is a standard operation within the developer's workflow and targets the author's own infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from several project files, creating an indirect prompt injection surface.
- Ingestion points: Processes
ArtSource/3D/Roster/subjects.json,review.json,receipt.json, and project rollout plans (plans/009-animal-creature-animation-rollout.md). - Boundary markers: No explicit delimiters or warnings are defined for these data files in the provided instructions.
- Capability inventory: The skill performs file system operations and executes commands via Python, Blender, Unity, and Git.
- Sanitization: No specific sanitization or validation of the input file content is mentioned before it is used to drive the pipeline.
Audit Metadata