subnautica-ii-deep-synergy-multiplayer-mod

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The instructions include downloading the BepInEx framework from its official GitHub repository. GitHub is a well-known and trusted service for software distribution.
  • [COMMAND_EXECUTION]: The skill guides users through standard command-line operations for file management (unzip, directory verification) and game-specific console commands required for mod operation. All commands are consistent with the stated purpose of enabling multiplayer functionality.
  • [DATA_EXFILTRATION]: The skill manages OpenAI and Anthropic API keys by directing users to store them in environment variables, which is a recognized security best practice. It includes a connectivity test using curl to verify API keys against official endpoints. Users are advised to be cautious with verbose logging (LogLevel = All) as it may capture sensitive data in local log files during troubleshooting.
  • [PROMPT_INJECTION]: The AI narration feature processes game-related context into LLM prompts, creating a surface for indirect prompt injection. However, the impact is limited to the narrative text generated for the user.
  • Ingestion points: Game context provided via the /synergy narrate command in SKILL.md.
  • Boundary markers: None explicitly defined in the provided examples.
  • Capability inventory: Limited to text-based lore and narrative generation within the game console.
  • Sanitization: Not detailed in the provided configuration or code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 08:22 AM