game-feel
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes a validation script
scripts/validate-game-feel.pywhich is used to verify the structure and content of game feel contracts. The script only uses the Python standard library and operates locally without network access or unsafe execution patterns. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to run its internal Python validator script. This is a legitimate use of the tool for verifying user-provided configuration files before processing them further. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined data in
game-feel-contract.json. 1. Ingestion point:game-feel-contract.json(SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Bash tool (subprocess call), file read/write (Edit/Write tools), and WebFetch (network). 4. Sanitization: Present; structural and content validation is performed by the Python script to ensure the data matches the expected schema.
Audit Metadata