write-emulator-patches
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is designed for local syntax validation of emulator patch files. It provides standalone Python scripts that perform regex-based checking on user-provided files without performing network operations or using unsafe dynamic execution.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external emulator logs and patch data to identify memory addresses and game IDs. This risk is managed by the skill's instructions which require verification of addresses and the use of provided syntax checkers to ensure data integrity.
- [COMMAND_EXECUTION]: The internal test scripts (
scripts/test_check_pnach.pyandscripts/test_check_settings_keys.py) usesubprocess.runto call the skill's own Python validators. This is a benign use of command execution intended for automated testing of the validation logic. - [EXTERNAL_DOWNLOADS]: The documentation mentions community tools like the DuckStation
chtdbvalidator on GitHub. These are provided as external references for manual use by the operator to ensure patch correctness.
Audit Metadata