phaser-movement-testing
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructions utilize
agent-browser evalto execute JavaScript code within the browser context. This code directly modifies the Phaser engine's key states (e.g.,key.isDown = true) and manually triggers thescene.update()loop to simulate movement when synthetic events fail.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points where the agent reads game state values (likeplayer.xandplayer.y) through browser evaluation. The skill demonstrates the capability to orchestrate complex interactions viaagent-browser evalwithout explicit boundary markers or sanitization, which is standard for specialized testing tools.\n- [SAFE]: The primary purpose of the skill is to provide testing workarounds for the Phaser framework's unique input handling requirements. All suggested commands and scripts are scoped to the testing environment and exhibit no malicious intent such as data exfiltration, credential harvesting, or persistence.
Audit Metadata