game-cheat-detection-and-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data from repositories to identify security threats. This creates an indirect prompt injection surface (Category 8).
- Ingestion points: The
analyze_cheat_repositoryfunction processesREADME.mdand.pyfiles from external paths. - Boundary markers: There are no explicit delimiters used to isolate external content from the agent's instructions during processing.
- Capability inventory: The skill utilizes standard file system operations (
os,pathlib) and hashing (hashlib) to evaluate file integrity and content. - Sanitization: The provided Python templates perform static analysis (searching for strings and patterns) rather than executing or sanitizing the ingested data.
- [SAFE]: The instructional content uses self-referential warnings about malicious software to educate the agent on detection patterns. These claims are descriptive and do not translate into executable malicious behavior within the skill itself.
- [EXTERNAL_DOWNLOADS]: The skill mentions external URLs, such as
skydock.netlify.app, strictly as examples of indicators for suspicious software. No automated downloads or network operations are triggered by the skill code.
Audit Metadata