As long as the assets dont contain code, they're kind of fair game. The rule of thumb is you cannot redistribute them, but if the person owns a legal copy you can point to them on their local system. It is not up to you to figure out if they're pointing to a pirated copy or a legitimate copy mind you.