The Agent Skills Directory

[COMMAND_EXECUTION]: The script "scripts/raster_qa.py" executes ImageMagick utilities (magick, identify, convert) to analyze image files. These calls are implemented using "subprocess.run" with list-based arguments, which avoids shell interpretation and prevents command injection vulnerabilities.
[SAFE]: The skill processes untrusted image data (sprites, textures) to verify technical requirements like alpha channels and dimensions. This processing is performed locally using the bundled script and does not involve network requests or access to sensitive system files.
[SAFE]: The Python script uses standard security practices for file system operations, including "tempfile" for atomic writes and umask-aware permission handling, ensuring that file creation is predictable and secure.

asset-core