se-dev-game-code

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads established utility software during the preparation phase. Fetches the uv package manager from astral.sh via PowerShell/Shell scripts. Downloads a Windows build of BusyBox from frippery.org to provide UNIX-like command support on Windows.
  • [COMMAND_EXECUTION]: The skill executes various local tools and scripts to process game files and maintain indexes. Uses dotnet to install ilspycmd for assembly decompilation. Uses git to version and track changes in the decompiled source code. Employs Python's subprocess module to run version checks and hierarchy queries.
  • [PRIVILEGE_ESCALATION]: The installation script modifies execution policies to facilitate setup. Employs powershell -ExecutionPolicy ByPass specifically to permit the installation of the uv tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could potentially contain malicious instructions. Ingestion points: Decompiled C# files in Data/Decompiled/ and game definition files in Data/Content/. Risk: Malicious comments or data within analyzed files could attempt to influence the agent's behavior during analysis. Sanitization: Data is read verbatim for indexing and search purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 01:06 PM