authoritative-server

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill utilizes official Decentraland vendor packages and CLI tools for multiplayer implementation, adhering to platform standards and following recommended vendor patterns.
  • [INDIRECT_PROMPT_INJECTION]: The documented server architecture processes data from external clients but emphasizes strict validation logic to maintain integrity.
  • Ingestion points: Client messages received via room.onMessage and data read from Storage.get (documented in server.ts and references/auth-server-examples.md).
  • Boundary markers: The instructions mandate using validateBeforeChange for all synced components and implementing proximity checks for anti-cheat.
  • Capability inventory: The server environment is capable of performing network fetches and writing persistent state to storage.
  • Sanitization: Patterns include verifying the senderAddress against AUTH_SERVER_PEER_ID and validating player positions using server-authoritative PlayerIdentityData.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 02:42 PM