phaser
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a comprehensive development guide that adheres to official Phaser 3 and Vite standards. It does not attempt to execute unauthorized commands or exfiltrate data.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to official Phaser and Vite resources for documentation and repository management. This includes instructions for using official project initialization tools like
@phaserjs/gameand installing thephaserlibrary from the public NPM registry. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze local project files, which introduces an inherent attack surface where malicious content within a project's configuration or source code could influence the agent's behavior.
- Ingestion points: Project configuration files (package.json, tsconfig.json, bundler configs), scene definition files, and local asset directories.
- Boundary markers: The instructions do not provide explicit boundary markers or specific warnings to ignore instructions found within the analyzed codebase.
- Capability inventory: The agent has the capability to modify source code, create new files, and provide instructions for running development servers and build processes.
- Sanitization: No explicit sanitization or validation of the data read from project files is specified.
Audit Metadata