megadev-gameplay

Warn

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The assets/adventure-lab/tools/check_gameplay.py script invokes a host C compiler (clang, cc, or gcc) and executes the resulting binary using subprocess.run. Additionally, the skill's documentation guides the agent to execute Docker commands to build and run project images.
  • [DYNAMIC_EXECUTION]: The check_gameplay.py script performs runtime compilation of C source files included in the skill (gameplay.c and test_gameplay.c) and immediately executes the generated binary to validate the gameplay model. This introduces a capability for arbitrary code execution if the source files were modified.
  • [EXTERNAL_DOWNLOADS]: The skill's build process and documentation reference the ewrogers/megadev:latest Docker image. This is a vendor-owned resource used to provide the Megadev toolchain environment for compiling Sega CD projects.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 20, 2026, 06:33 AM