dayz-aviation
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for analyzing third-party DayZ mod content, including recovered and obfuscated scripts (e.g., SIB, MH6, RFFS). While this presents an ingestion surface for untrusted data, the skill is highly defensive, providing explicit warnings against known malicious patterns such as "anti-extraction bombs" (decoy files with reserved Windows names) and documenting robust sanitization practices (NaN-safe physics).
- Ingestion points: Research involves processing external PBO files and recovered .c scripts from Workshop IDs 3730564764 and 3485438937.
- Boundary markers: Explicit warnings advise agents to avoid specific malicious PBOs ("do not spend a cycle on it") and to use "NaN-safe" wrappers for all physics calculations.
- Capability inventory: The skill assumes access to the P:\ modding drive, Mikero DePboTools, and the ability to author/modify Enforce scripts.
- Sanitization: Proactive sanitization is taught through SanitizeFloat and SanitizeVector helpers to prevent NaN (Not a Number) propagation from crashing the game engine.
- [OBFUSCATION]: The skill identifies the use of zero-width characters and reserved device names (e.g., COM1, NUL, PRN) as an obfuscation technique used by specific third-party mods to prevent extraction and analysis. This is documented as a security threat to be avoided, rather than a capability implemented by the skill.
Audit Metadata