phaser-test-seam-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill's content is instructional and intended for game development and testing workflows.
- [COMMAND_EXECUTION]: The skill utilizes legitimate browser automation tools through the
agent-browserinterface. It demonstrates how to useagent-browser evalandagent-browser mousecommands to interact with a game's internal state and simulate user input. These commands are localized to the testing environment. - [PROMPT_INJECTION]: While the skill involves reading data from a web page (Phaser game state), which inherently creates an indirect prompt injection surface, no malicious instructions or bypass attempts were found. The risk is consistent with standard browser-based agent operations.
- Ingestion points: The skill reads from the
window.__TEST__object and its properties usingagent-browser evalas seen inSKILL.mdandreferences/common-commands.md. - Boundary markers: None are explicitly defined in the provided code patterns to separate game data from agent instructions.
- Capability inventory: The skill utilizes
agent-browser eval,agent-browser mouse, andgrepfor environmental inspection and interaction. - Sanitization: Data retrieved from the browser is not sanitized before use, which is typical for developer-focused testing scripts.
Audit Metadata