authoritative-server
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes official Decentraland vendor packages and CLI tools for multiplayer implementation, adhering to platform standards and following recommended vendor patterns.
- [INDIRECT_PROMPT_INJECTION]: The documented server architecture processes data from external clients but emphasizes strict validation logic to maintain integrity.
- Ingestion points: Client messages received via
room.onMessageand data read fromStorage.get(documented inserver.tsandreferences/auth-server-examples.md). - Boundary markers: The instructions mandate using
validateBeforeChangefor all synced components and implementing proximity checks for anti-cheat. - Capability inventory: The server environment is capable of performing network fetches and writing persistent state to storage.
- Sanitization: Patterns include verifying the
senderAddressagainstAUTH_SERVER_PEER_IDand validating player positions using server-authoritativePlayerIdentityData.
Audit Metadata