creature-animation

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates animation tasks by executing local Python scripts (e.g., pipeline.py, unity_install.py, subject_report.py) and project-specific commands in Blender and Unity. These actions are confined to the intended automation pipeline and follow strict workflows.
  • [EXTERNAL_DOWNLOADS]: The skill uses git to synchronize assets with the vendor's repository at github.com/TheOrcDev/finalstand.git. This is a standard operation within the developer's workflow and targets the author's own infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from several project files, creating an indirect prompt injection surface.
  • Ingestion points: Processes ArtSource/3D/Roster/subjects.json, review.json, receipt.json, and project rollout plans (plans/009-animal-creature-animation-rollout.md).
  • Boundary markers: No explicit delimiters or warnings are defined for these data files in the provided instructions.
  • Capability inventory: The skill performs file system operations and executes commands via Python, Blender, Unity, and Git.
  • Sanitization: No specific sanitization or validation of the input file content is mentioned before it is used to drive the pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:52 PM