skills/m4cs/game-creator/add-audio/Gen Agent Trust Hub

add-audio

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to read and process external source code files (e.g., src/core/EventBus.js, scene files) to identify game events. This untrusted content is then used to influence the generation of new audio code and modifications to the project.
  • Ingestion points: The agent is instructed to read local game files at $ARGUMENTS or the current directory.
  • Boundary markers: No specific boundary markers or instruction-following constraints are defined for the reading of external source files.
  • Capability inventory: The skill allows the agent to create new files (src/audio/AudioManager.js, src/audio/AudioBridge.js, src/audio/music.js, src/audio/sfx.js) and modify existing application logic (EventBus.js, main.js).
  • Sanitization: No explicit sanitization or validation of the ingested code is specified, relying on the agent's interpretation of the game logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 12:00 AM