se2-dev-game-code

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads busybox.exe from frippery.org and the uv package manager from astral.sh during its preparation phase. These downloads are required for the local execution environment and target well-known domains for these specific utilities.
  • [REMOTE_CODE_EXECUTION]: The preparation scripts use shell piping (irm | iex in PowerShell and curl | sh in Bash) to install the uv package manager from astral.sh. While this follows a remote execution pattern, it targets a well-known service for an established tool.
  • [COMMAND_EXECUTION]: The skill invokes several external binaries and shell commands via subprocess calls, including ilspycmd for C# decompilation and git for maintaining a versioned code repository. These actions are consistent with the skill's core functionality.
  • [SAFE]: No malicious behavior, data exfiltration, or credential harvesting patterns were detected. The skill's operations are consistent with its described function as a development tool for inspecting game source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 07:53 AM
Security Audit — agent-trust-hub — se2-dev-game-code