opengame-offline-arcade
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local Python script (
scripts/project.py) which relies exclusively on the Python standard library, avoiding risks associated with external package dependencies.\n- [SAFE]: Project file management includes robust security controls, such as asafe_childfunction that prevents path traversal attacks by rejecting absolute paths, parent directory references (..), and symbolic links.\n- [SAFE]: The generated HTML output is protected against cross-site scripting (XSS) through a custom JSON serialization process inpatch_htmlthat escapes the<character when embedding configuration data.\n- [SAFE]: The skill enforces resource constraints during project creation and export, including limits on the total number of files and maximum payload size to prevent resource exhaustion.\n- [SAFE]: References to external repositories and websites are limited to the author's official resources and are documented for attribution and project documentation purposes without implementing network operations.
Audit Metadata