phaser4-game-image-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-linked image files (PNG, JPEG, WebP) and their metadata. It explicitly mitigates indirect injection risks by performing mandatory metadata cleaning and performing rigorous structural and visual validation—including pixel-level decoding and Phaser runtime loading tests—before resource replacement.
- [COMMAND_EXECUTION]: The skill executes external image optimization utilities to compress assets. It limits risk by prioritizing existing project tools, using fixed versions/parameters, and operating within a sandboxed candidate directory before any file replacement occurs.
- [SAFE]: The skill follows least-privilege principles by requiring explicit user invocation (
$phaser4-game-image-optimization) and routing all side effects through a dedicated workflow auditor (phaser4-game-workflow-control).
Audit Metadata