ultimate-mobile-game-developer
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a 'PROJECT INTELLIGENCE MODE' (SKILL.md) and 'GDD Generator' workflow (analysis/GDD_GENERATOR.md) designed to parse and analyze external project structures. This functionality represents a surface for indirect prompt injection if the analyzed files contain malicious instructions.\n
- Ingestion points: The skill instructs the agent to 'Read project structures' and 'Parse project structure' from external codebases.\n
- Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from executing instructions found within the analyzed files.\n
- Capability inventory: The skill is intended to generate documentation, propose refactors, and bootstrap feature skeletons based on the ingested data.\n
- Sanitization: No sanitization or validation of the external content is prescribed in the instructions.
Audit Metadata