td-python-extension

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill outlines patterns for generating and initializing Python extension classes that are dynamically loaded and executed by the TouchDesigner software, including the synchronization of code to local project directories.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by processing input from component parameters through callback methods.
  • Ingestion points: Data enters via onParValueChange and onParPulse methods defined in examples.md and reference.md.
  • Boundary markers: The templates do not specify explicit delimiters or instruction-ignore warnings for parameter strings.
  • Capability inventory: The extension environment allows for TouchDesigner API calls, file writing via set_dat_content, and potential network access through standard Python libraries.
  • Sanitization: The skill provides a safe operator resolution pattern (_resolveSource) in reference.md to validate inputs before they are used as operator references.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 03:51 PM