operate-pcsx2
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/test_build_command.pyfile utilizes thesubprocess.runmodule to perform automated testing of the command-line builder. This execution is benign as it is confined to testing the logic of the localscripts/build_command.pyscript within the development environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs such as emulator logs (
emulog.txt), guest behavior observations, and graphics captures. To mitigate risks associated with processing untrusted metadata, the skill provides a dedicated Python script (scripts/build_command.py) that usesshlex.jointo ensure all generated command-line arguments are properly escaped before execution, which is a security best practice.
Audit Metadata