phaser-qa-release
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a bundled Node.js script (
scripts/inspect-phaser-canvas.mjs). This tool uses the Playwright library to launch a Chromium browser instance to perform visual analysis and capture screenshots of a target Phaser game. This behavior is necessary for the skill's stated purpose of automated QA. - [EXTERNAL_DOWNLOADS]: The skill depends on external Node.js packages (
playwright,pngjs). Additionally, the inspection script includes error handling that suggests the user/agent runnpx playwright install chromiumto fetch the necessary browser binaries if they are not present. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through its automated testing of web pages.
- Ingestion points: The
inspect-phaser-canvas.mjsutility reads diagnostic information from the target web page's JavaScript environment via thewindow.__PHASER_GAME_DIAGNOSTICS__variable. - Boundary markers: The diagnostic data is included in a JSON report for the agent without specific delimiters or instructions to treat the content as untrusted data.
- Capability inventory: The agent has capabilities for file system access, command execution, and browser-based network access.
- Sanitization: No sanitization is performed on the diagnostic data before it is presented to the agent. However, as this data ingestion is required for the skill's primary purpose of game QA, it is considered an inherent and acceptable functional risk.
Audit Metadata