manage-scene-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted project data, creating a surface for instructions embedded in that data to influence agent behavior.
- Ingestion points: The agent reads project files, level scripts, and code using the
read_fileandsearch_codetools as described in the suggested process and security guardrails inSKILL.md. - Boundary markers: Absent. The skill instructions do not require the agent to use delimiters or explicit instructions to ignore embedded commands within the files it processes.
- Capability inventory: The skill has access to high-impact tools including
execute_command,write_file,create_file,edit_file, andrun_build. - Sanitization: Absent. There are no instructions for sanitizing, escaping, or validating the content of the files before the agent acts upon the information they contain.
Audit Metadata