phaser-runtime-watch
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation describes executing a local Python script (
runner.py) to perform thewatchaction. This script acts as a wrapper for the game runtime environment. - [REMOTE_CODE_EXECUTION]: The skill is designed to load and execute JavaScript code from a local file path provided via the
--sceneargument. It also dynamically evaluates JavaScript expressions provided through the--sampleargument to collect telemetry. While this involves code execution, it is the fundamental purpose of the tool for game logic verification. - [SAFE]: The external asset URLs used in the examples point to
labs.phaser.io, which is the official resource domain for the Phaser framework and is considered a well-known service for this context.
Audit Metadata