The Agent Skills Directory

[SAFE]: No security issues were detected. The skill contains a set of Go templates and Python utility scripts designed for game development workflow.
[DYNAMIC_EXECUTION]: The scripts/package_macos_app.py script uses subprocess.run() to invoke the macOS lipo tool for creating universal binaries. This is a standard packaging procedure and the arguments are strictly controlled by the script logic without using shell=True.
[COMMAND_EXECUTION]: The skill documentation correctly identifies necessary shell commands for Go project management (e.g., go mod tidy, go build). These are legitimate development commands and are used within the context of the user's requested project actions.
[INDIRECT_PROMPT_INJECTION]: The scripts/check_ebitengine.py script performs static analysis on Go source files. While it processes potentially untrusted code, it does so using non-executable regular expressions and does not execute the analyzed content, posing no risk to the local environment.
[EXTERNAL_DOWNLOADS]: The GitHub Actions workflow template (assets/ci/github-actions.yml) correctly identifies standard dependencies for a Linux graphics environment (e.g., xvfb, libgl1, libasound2). These are well-known system libraries required for running headless engine tests.

ebitengine-game