gameplay-mechanism-designer

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a structured framework for game mechanism design, utilizing a set of local reference files (references/*.md, references/*.tsv) to guide the agent's logic. It does not perform network operations, access sensitive files, or execute external code.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs such as game seeds, pitches, and design requirements to generate its outputs. It also searches a local data file (references/mechanism-chains.tsv) using terms derived from user input. While this constitutes an ingestion surface for untrusted data, the skill uses specific design taxonomies and coordinate systems (WHAT x HOW x WHERE) which act as structural constraints, and the resulting outputs are confined to game design documentation.
  • Ingestion points: User-provided game design seeds, pitches, requirements, and visual inputs (SKILL.md).
  • Boundary markers: No explicit security delimiters are defined, but the agent is instructed to extract and normalize specific design fields.
  • Capability inventory: File searching (rg), file reading, and complex markdown generation.
  • Sanitization: None explicitly defined, but operations are limited to a local, static data file provided within the skill package.
  • [COMMAND_EXECUTION]: The instructions direct the agent to search a local TSV file using the rg (ripgrep) tool. This is a functional requirement for retrieving game design data and does not involve downloading or executing untrusted scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 07:58 PM