smash-and-clash-setup
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions using
npx smashandclashand installing@smashandclash/sdkvia npm. These packages originate from the official vendor's registry scope and are intended for game interaction and development. - [COMMAND_EXECUTION]: The instructions suggest executing
npx smashandclashto launch the game interface within the user's terminal environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by calling
get_rulesfrom the vendor's API athttps://www.smashandclash.in/api/mcpto inform the agent's understanding of the game logic. - Ingestion points: External rules fetched from
smashandclash.invia theget_rulestool. - Capability inventory: Access to tools for game state management and challenge links.
- Boundary markers: None present.
- Sanitization: None present.
Audit Metadata