team-level

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious instructions, obfuscation, or unauthorized access patterns were detected within the skill's logic.
  • [PROMPT_INJECTION]: The skill features a context-gathering workflow that reads local project files (e.g., game concept, pillars, and narrative docs) to inform subagent prompts. This creates a surface for indirect prompt injection if project files are modified with malicious instructions, though the risk is minimal for local project assets.
  • Ingestion points: Project files in design/gdd/, design/levels/, design/narrative/, and design/art/.
  • Boundary markers: The skill does not define specific delimiters to isolate external content in prompts.
  • Capability inventory: Orchestrates subagents via Task; frontmatter allows Bash and Write tools.
  • Sanitization: No content validation or sanitization is performed on the ingested documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 12:17 AM
Security Audit — agent-trust-hub — team-level