awesome-game-security-overview
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a resource list from the author's official GitHub repository at https://raw.githubusercontent.com/gmh5225/awesome-game-security/refs/heads/main/README.md to provide users with up-to-date tools and resources.
- [PROMPT_INJECTION]: An indirect prompt injection surface was identified. Ingestion points: The agent retrieves data from an external Markdown file hosted on GitHub. Boundary markers: Absent; the skill does not define specific delimiters or instructions to prevent the agent from executing instructions that might be embedded in the fetched text. Capability inventory: The skill allows for the execution of local Python scripts for repository organization and maintenance. Sanitization: Absent; no validation or filtering of the remote data is performed before it is processed by the agent.
- [COMMAND_EXECUTION]: The documentation provides instructions for running local scripts, specifically scripts/generate-toc.py and scripts/remove-forks.py, using the Python interpreter.
Audit Metadata