game-engine
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external libraries and project templates from trusted organizations and well-known services. This includes script references for Three.js (hosted on Cloudflare's CDN), Babylon.js (via its official CDN), and A-Frame. It also provides links to open-source templates on GitHub. These references are standard for web development and do not represent a security risk.
- [INDIRECT_PROMPT_INJECTION]: The game development guides (e.g.,
assets/2d-platform-game.md) include patterns for loading level configuration data from external JSON files usinggame.load.json(). While this creates a theoretical ingestion surface for untrusted data, it is a routine feature in game development architecture. - Ingestion points: Usage of
game.load.json()inassets/2d-platform-game.mdandassets/simple-2d-engine.md. - Boundary markers: Not included in the educational boilerplate code.
- Capability inventory: The skill describes the use of standard browser-based rendering, audio, and hardware input APIs.
- Sanitization: Not implemented in the provided educational templates.
Audit Metadata