card-game-design
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a domain-specific design tool with no execution capabilities. It does not perform network operations, access sensitive files, or execute system commands. All code snippets provided are illustrative examples for game logic and are not executed in the host environment.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze user-provided data (card definitions), creating an ingestion surface. 1. Ingestion points: User-provided card text and mechanics described during interaction. 2. Boundary markers: The SKILL.md instructions mandate grounding all responses in provided reference files, which serves as a logical constraint against user-supplied overrides. 3. Capability inventory: Zero capabilities detected (no tool access, no shell, no file writes, no network). 4. Sanitization: User input is analyzed using the regex patterns defined in references/validations.md to ensure compliance with game design constraints.
Audit Metadata