Security audit
Build Pixel Pet Sprites
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent pixel-sprite generation and packaging workflow with no hidden credential access, persistence, or unrelated behavior found.
Before installing, users should expect this skill to use image generation and local file writes for sprite assets, which may consume tokens or provider quota. Review output paths before running packaging commands, but no security-blocking behavior was found.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.