megadev-gameplay
Warn
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
assets/adventure-lab/tools/check_gameplay.pyscript invokes a host C compiler (clang, cc, or gcc) and executes the resulting binary usingsubprocess.run. Additionally, the skill's documentation guides the agent to execute Docker commands to build and run project images. - [DYNAMIC_EXECUTION]: The
check_gameplay.pyscript performs runtime compilation of C source files included in the skill (gameplay.candtest_gameplay.c) and immediately executes the generated binary to validate the gameplay model. This introduces a capability for arbitrary code execution if the source files were modified. - [EXTERNAL_DOWNLOADS]: The skill's build process and documentation reference the
ewrogers/megadev:latestDocker image. This is a vendor-owned resource used to provide the Megadev toolchain environment for compiling Sega CD projects.
Audit Metadata