se-dev-game-code
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads established utility software during the preparation phase. Fetches the
uvpackage manager fromastral.shvia PowerShell/Shell scripts. Downloads a Windows build ofBusyBoxfromfrippery.orgto provide UNIX-like command support on Windows. - [COMMAND_EXECUTION]: The skill executes various local tools and scripts to process game files and maintain indexes. Uses
dotnetto installilspycmdfor assembly decompilation. Usesgitto version and track changes in the decompiled source code. Employs Python'ssubprocessmodule to run version checks and hierarchy queries. - [PRIVILEGE_ESCALATION]: The installation script modifies execution policies to facilitate setup. Employs
powershell -ExecutionPolicy ByPassspecifically to permit the installation of theuvtool. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could potentially contain malicious instructions. Ingestion points: Decompiled C# files in
Data/Decompiled/and game definition files inData/Content/. Risk: Malicious comments or data within analyzed files could attempt to influence the agent's behavior during analysis. Sanitization: Data is read verbatim for indexing and search purposes.
Audit Metadata