build-and-debug-pcsx2
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The assets/examples/verify.sh script downloads official software releases and clones the source code from the PCSX2 GitHub repository. These activities target a well-known project and incorporate SHA256 checksum verification for downloaded assets to ensure file integrity.
- [COMMAND_EXECUTION]: The skill uses shell scripts and Python's subprocess module to facilitate the software build process, run unit tests, and launch the emulator binary. These operations are limited to the intended development and debugging workflow, with instructions emphasizing execution within isolated case directories to protect the host system.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as .pnach patch files and emulator logs. It addresses associated risks by implementing a dedicated validation script (scripts/check_pnach.py) that uses regular expressions for field sanitization, and by instructing the agent to use boundary markers like isolated data paths and portable mode. The skill's capabilities, including shell execution and file manipulation, are explicitly inventoryed in the provided build and test scripts.
Audit Metadata