skills/egorfedorov/slot-casino-game-developer-skills-for-stake-engine/ai-slot-game-developer/Gen Agent Trust Hub
ai-slot-game-developer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and validate external JSON specifications, creating a potential surface for indirect prompt injection if the processed data contains adversarial instructions.
- Ingestion points: The
scripts/validate_ai_slot_runtime_spec.pyscript reads data from a user-provided file path via the--inputargument. - Boundary markers: The script performs structural validation but does not implement explicit delimiters or instructions to prevent the agent from following natural language prompts that might be embedded within the JSON values.
- Capability inventory: The associated Python script is limited to local file reading and printing to standard output. It does not possess network access, file writing capabilities, or the ability to execute arbitrary shell commands.
- Sanitization: The script uses standard JSON parsing and enforces a schema by checking for specific keys and data types, which provides a degree of validation against malformed data but not against prompt-based attacks.
Audit Metadata