td-python-extension
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill outlines patterns for generating and initializing Python extension classes that are dynamically loaded and executed by the TouchDesigner software, including the synchronization of code to local project directories.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing input from component parameters through callback methods.
- Ingestion points: Data enters via
onParValueChangeandonParPulsemethods defined inexamples.mdandreference.md. - Boundary markers: The templates do not specify explicit delimiters or instruction-ignore warnings for parameter strings.
- Capability inventory: The extension environment allows for TouchDesigner API calls, file writing via
set_dat_content, and potential network access through standard Python libraries. - Sanitization: The skill provides a safe operator resolution pattern (
_resolveSource) inreference.mdto validate inputs before they are used as operator references.
Audit Metadata