smash-and-clash-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for using the official
@smashandclash/sdkTypeScript library. All external resources, including the NPM package and the API endpoint (smashandclash.in), belong to the skill's author/vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes game data and public records (profiles, match history) from the game API. While this constitutes an external data ingestion surface, the processing is limited to game logic and data display, representing a minimal and standard risk surface for this type of application.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@smashandclash/sdkpackage via NPM. This is a standard dependency for the skill's primary purpose and originates from the recognized vendor namespace.
Audit Metadata