foundry-vtt-system-dev
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides standard architectural patterns for game system development on the Foundry VTT platform.
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates surfaces for processing user-controlled data (such as character biographies and item descriptions). However, it explicitly instructs developers to use platform-native sanitization mechanisms like
htmlFieldsandfilePathFieldswithin thesystem.jsonmanifest to prevent XSS and other injection attacks, following security best practices. - [REMOTE_CODE_EXECUTION]: While the skill provides templates for creating script-based macros, this is a core intended feature of the Foundry VTT platform. The provided templates for 'Item Macros' follow the standard, non-malicious implementation patterns for the environment.
- [COMMAND_EXECUTION]: The documentation discusses build pipelines using tools like
Rollup,Vite, andfoundryvtt-cli. These are standard local development tools for the platform and do not involve suspicious remote command execution.
Audit Metadata