subnautica-2-coop-mod
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHDATA_EXFILTRATIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATION
Full Analysis
- [DATA_EXFILTRATION]: The skill's configuration parameters and C# code examples reveal a high-risk data flow where sensitive credentials (
OPENAI_API_KEYandANTHROPIC_API_KEY) are read from the host's environment variables and then explicitly broadcast to every client in the multiplayer session via theNetworkManager.SyncConfig()method. This allows any peer in the game to steal the host's private API keys. - [CREDENTIALS_UNSAFE]: The software described in the skill is designed to handle high-value API keys by loading them into shared memory and synchronizing them across a network connection, creating a persistent credential exposure vulnerability.
- [PRIVILEGE_ESCALATION]: The troubleshooting section includes instructions to execute shell commands with root privileges (
sudo ufw allow 7777/udp) to modify firewall settings, which could be leveraged to weaken system security if executed without proper validation.
Recommendations
- AI detected serious security threats
Audit Metadata