skills/kyh/vibedgames/multiplayer/Gen Agent Trust Hub

multiplayer

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the @vibedgames/multiplayer package from the NPM registry as its core dependency.
  • [DATA_EXFILTRATION]: Real-time multiplayer synchronization is facilitated through https://vibedgames-party.kyh.workers.dev. This endpoint is a vendor-owned resource belonging to the author 'kyh'.
  • [COMMAND_EXECUTION]: The documentation provides instructions for using the vibedgames CLI tool (via vg or npx) to deploy game distributions to the author's hosting platform.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The library ingests sharedState, playerState, and fire-and-forget events from a remote coordination server.
  • Boundary markers: The skill provides architectural patterns in references/architecture.md to isolate network logic and uses explicit isHost checks to gate authoritative writes.
  • Capability inventory: The library's capabilities are focused on game state synchronization; it does not interact with sensitive file systems or administrative system commands.
  • Sanitization: The documentation includes guidance on implementing optional schema validation for both incoming and outgoing data to ensure wire-format integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:16 AM