wow-api-combat
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill body contains technical API documentation and code examples without any instructions intended to override agent behavior, bypass safety protocols, or extract system prompts.
- [DATA_EXFILTRATION]: No evidence was found of sensitive data access or unauthorized network transmission. The reference to the Warcraft Wiki domain is a standard citation for API documentation and does not involve data harvesting.
- [REMOTE_CODE_EXECUTION]: The skill does not contain patterns for downloading or executing remote scripts. The provided Lua code snippets are static examples intended for use within the WoW game client sandbox.
- [OBFUSCATION]: No obfuscation techniques, such as Base64 encoding, zero-width characters, or homoglyphs, were detected in the file content.
- [DYNAMIC_EXECUTION]: There are no indicators of runtime code generation, unsafe deserialization, or library injection. The technical descriptions of 'secret values' refer to internal game engine mechanics for visual mapping, not code execution vulnerabilities.
Audit Metadata