worldview-game-sound-detection-and-distraction

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data such as source code, map files, and asset metadata to generate game mechanics. This represents a potential surface for indirect prompt injection if the processed files contain instructions designed to influence the agent's behavior.
  • Ingestion points: SKILL.md instructs the agent to accept an existing repository, player controller code, surface data, and maps.
  • Boundary markers: The skill implements a 'Locking' mechanism (Emission-event, Propagation-map, Listener-decision, Distraction-opportunity, and Hearing-authority locks) to compartmentalize decisions and provides specific output headers to separate facts from proposals.
  • Capability inventory: The agent is instructed to write implementation files to the project source tree and generate working encounters including playable entry points.
  • Sanitization: The skill relies on the agent's internal analysis and structured templates rather than explicit data sanitization routines. The structured 'Lock' methodology reduces the risk by requiring explicit documentation and verification of facts before implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 01:44 PM