opengame-offline-arcade

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses a local Python script (scripts/project.py) which relies exclusively on the Python standard library, avoiding risks associated with external package dependencies.\n- [SAFE]: Project file management includes robust security controls, such as a safe_child function that prevents path traversal attacks by rejecting absolute paths, parent directory references (..), and symbolic links.\n- [SAFE]: The generated HTML output is protected against cross-site scripting (XSS) through a custom JSON serialization process in patch_html that escapes the < character when embedding configuration data.\n- [SAFE]: The skill enforces resource constraints during project creation and export, including limits on the total number of files and maximum payload size to prevent resource exhaustion.\n- [SAFE]: References to external repositories and websites are limited to the author's official resources and are documented for attribution and project documentation purposes without implementing network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 03:37 PM