subnautica-ii-deep-synergy-multiplayer-mod
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions include downloading the BepInEx framework from its official GitHub repository. GitHub is a well-known and trusted service for software distribution.
- [COMMAND_EXECUTION]: The skill guides users through standard command-line operations for file management (unzip, directory verification) and game-specific console commands required for mod operation. All commands are consistent with the stated purpose of enabling multiplayer functionality.
- [DATA_EXFILTRATION]: The skill manages OpenAI and Anthropic API keys by directing users to store them in environment variables, which is a recognized security best practice. It includes a connectivity test using
curlto verify API keys against official endpoints. Users are advised to be cautious with verbose logging (LogLevel = All) as it may capture sensitive data in local log files during troubleshooting. - [PROMPT_INJECTION]: The AI narration feature processes game-related context into LLM prompts, creating a surface for indirect prompt injection. However, the impact is limited to the narrative text generated for the user.
- Ingestion points: Game context provided via the
/synergy narratecommand inSKILL.md. - Boundary markers: None explicitly defined in the provided examples.
- Capability inventory: Limited to text-based lore and narrative generation within the game console.
- Sanitization: Not detailed in the provided configuration or code snippets.
Audit Metadata