duckstation-emulator-operations

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The unit test script scripts/test_build_command.py uses subprocess.run to execute the local build_command.py script. This is a controlled execution within the skill's own environment intended to verify the logic of the command-line builder using the current Python interpreter.
  • [EXTERNAL_DOWNLOADS]: Reference documentation in references/textures-and-builds.md provides instructions for cloning the official DuckStation repository and downloading dependency packs from GitHub. These links point to the legitimate project sources and are standard for software development workflows.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles emulated file system paths and configuration. It includes mandatory safety warnings and evidence chains for the emulator's PCDrv feature, explicitly noting that it does not provide a security sandbox and instructing the agent to use isolated directory fixtures and portable mode to prevent unintended host file access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 12:52 AM