game-design-document
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a document generation tool that operates locally. It does not implement networking, authentication, or server-side endpoints, significantly minimizing its attack surface.
- [EXTERNAL_DOWNLOADS]: The installation process requires standard, well-known Python libraries (python-docx, fpdf2, python-pptx) from official package registries. These are trusted dependencies for document processing.
- [COMMAND_EXECUTION]: The skill includes Python scripts to render generated content into various file formats. While the PDF generator can optionally delegate DOCX conversion to external software like Microsoft Word or LibreOffice, this path is clearly documented with security warnings and requires explicit user trust confirmation.
- [SAFE]: The instructions in SKILL.md include a 'Data Sensibility Policy' that requires the AI to explicitly cite sources or mark assumptions for any numeric market data or business metrics, effectively mitigating potential hallucinations in professional documents.
- [SAFE]: The repository includes a SECURITY.md file and a detailed 'deep-research-report.md' which performs a self-audit of the skill's code and prompts, identifying and documenting operational risks such as the handling of untrusted document files.
Audit Metadata