arcade-phaser-developer
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill implements a defensive mechanism by requiring all untrusted user requirements to be enclosed within
<game-request>tags, ensuring they are treated as data rather than instructions. - [COMMAND_EXECUTION]: The skill recommends using the
wc -cutility to verify script sizes, which is a safe and legitimate use of shell tools for its stated performance goals. - [SAFE]: The skill explicitly prohibits dangerous JavaScript practices such as
eval()andnew Function()in its constraints. - [SAFE]: The use of
localStoragefor high scores and the dependency on the Phaser game engine are standard, secure practices for web-based arcade development.
Audit Metadata