game-economy-designer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill relies on reading project documentation (using
Read,Glob, andGrep) to perform its design tasks. This creates a surface where malicious instructions embedded in those documents could potentially influence the agent. - Ingestion points: The skill reads existing design documents, balance tables, and monetization specs (Workflow steps 1 and 2).
- Boundary markers: Absent. The instructions do not provide delimiters or warnings to ignore embedded instructions in the ingested files.
- Capability inventory: The skill has the authority to
WriteandEditproject files, which could be abused if the agent is compromised by injected content. - Sanitization: Absent. There is no requirement for the agent to sanitize or validate the data ingested from the file system.
Audit Metadata