subnautica-ii-coop-bepinex-mod
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
NarrativeEngineclass processes game context and player actions to generate procedural narrative content via the OpenAI API. This creates a potential surface for indirect prompt injection if the context data includes unsanitized player-controlled content. - Ingestion points:
NarrativeEngine.GenerateNarrationmethod inSKILL.md. - Boundary markers: The prompt template lacks explicit delimiters or instructions to prevent the LLM from following commands embedded within the
{context}variable. - Capability inventory: The AI's output is limited to returning narrative text; the provided code does not show the output being used to trigger shell commands, file system writes, or network operations.
- Sanitization: The skill does not implement validation or escaping for the input context string before it is interpolated into the API request.
- [EXTERNAL_DOWNLOADS]: The setup instructions direct users to download the BepInEx framework from its official releases page on GitHub, which is a well-known and recognized service for game modding tools.
- [COMMAND_EXECUTION]: The mod implements a variety of console commands accessible through the game's terminal (e.g.,
/start_server,/join_session,/api_narrate) to manage multiplayer sessions and test AI features. - [DYNAMIC_EXECUTION]: The skill uses the Harmony library for IL2CPP hooking and runtime method patching to synchronize game state between players. While this involves dynamic code modification, it is the standard and expected method for BepInEx-based game modifications.
Audit Metadata