multiplayer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@vibedgames/multiplayerpackage from the NPM registry as its core dependency. - [DATA_EXFILTRATION]: Real-time multiplayer synchronization is facilitated through
https://vibedgames-party.kyh.workers.dev. This endpoint is a vendor-owned resource belonging to the author 'kyh'. - [COMMAND_EXECUTION]: The documentation provides instructions for using the
vibedgamesCLI tool (viavgornpx) to deploy game distributions to the author's hosting platform. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The library ingests
sharedState,playerState, and fire-and-forget events from a remote coordination server. - Boundary markers: The skill provides architectural patterns in
references/architecture.mdto isolate network logic and uses explicitisHostchecks to gate authoritative writes. - Capability inventory: The library's capabilities are focused on game state synchronization; it does not interact with sensitive file systems or administrative system commands.
- Sanitization: The documentation includes guidance on implementing optional schema validation for both incoming and outgoing data to ensure wire-format integrity.
Audit Metadata