skills/xsyetopz/skills/operate-pcsx2/Gen Agent Trust Hub

operate-pcsx2

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/test_build_command.py file utilizes the subprocess.run module to perform automated testing of the command-line builder. This execution is benign as it is confined to testing the logic of the local scripts/build_command.py script within the development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs such as emulator logs (emulog.txt), guest behavior observations, and graphics captures. To mitigate risks associated with processing untrusted metadata, the skill provides a dedicated Python script (scripts/build_command.py) that uses shlex.join to ensure all generated command-line arguments are properly escaped before execution, which is a security best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 02:13 PM