deck-wizard
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill documents the platform's dynamic execution syntax for user-initiated tasks like logging into Untapped.gg and standard development workflows (e.g., git log). These references are instructional and aligned with the tool's intended functionality.
- [EXTERNAL_DOWNLOADS]: The skill fetches Magic: The Gathering card data, rulings, and metagame statistics from established and trusted community providers including MTGJSON, Scryfall, and EDHREC.
- [DATA_EXPOSURE]: The skill includes functionality to read local MTG Arena logs (Player.log) to identify a user's card collection and wildcard counts. This data remains local and is used solely to provide budget-aware deck recommendations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as web-based metagame reports and user-provided deck lists. It mitigates potential injection risks through a structured multi-step verification process, including mechanical audits (legality, mana, price) and an adversarial 'Self-Grill' debate between sub-agents.
Audit Metadata