cocos2d-x
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [Unverifiable Dependencies & Remote Code Execution] (MEDIUM): The installation guide suggests cloning a source repository from GitHub and running a Python setup script, which is a classic 'download and execute' pattern.
- [Command Execution] (MEDIUM): The skill provides instructions to run shell commands such as 'cmake' and 'make' for building the engine and project.
- [Privilege Escalation] (MEDIUM): Setup steps for Linux recommend using 'sudo apt-get install' for dependency installation, which can be risky if the user environment is not secured.
- [Indirect Prompt Injection] (LOW): The skill processes user requests about game creation without boundary markers or input sanitization. 1. Ingestion points: User queries for game engine guidance. 2. Boundary markers: Absent. 3. Capability inventory: Ability to execute build commands and setup scripts. 4. Sanitization: Absent.
Audit Metadata