senior-game-math-engineer

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run local verification scripts such as python3 Engine/scripts/verify_rtp.py and bash games/Darumas/verify_math.sh. These commands are part of the intended engineering workflow and are restricted to relative paths within the project repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input such as game IDs, mode definitions, and target metrics (ingestion points in SKILL.md and references/workflow.md). Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present. Capability inventory: The skill can execute local scripts and suggest file modifications via a 'Patch Plan'. Sanitization: No explicit validation or escaping of input data is documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:29 AM