game-improvement
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to use the
playdropCLI for project initialization, validation, and performance capturing. These are legitimate administrative and development operations. - [EXTERNAL_DOWNLOADS]: The skill retrieves game assets from the Playdrop catalog using CLI search and browse functions. These assets are hosted on the vendor's official platform.
- [PROMPT_INJECTION]: The skill processes project-specific configuration files and catalog search results, which represents an indirect prompt injection surface. Ingestion points: The skill reads
catalogue.jsonand metadata from catalog searches. Boundary markers: There are no explicit markers or instructions to ignore embedded commands in the processed data. Capability inventory: The skill can execute variousplaydropCLI commands. Sanitization: No content validation or sanitization steps are defined for the ingested data.
Audit Metadata