game-design-prototyping-companion
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/branch_map_svg.py) to convert design data into visual maps. The script uses standard libraries and is confined to the skill's directory structure. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a data processor for user-provided game design details.
- Ingestion points: User-provided labels, notes, and prototype descriptions in
SKILL.md. - Boundary markers: The skill uses structured JSON formatting to separate data fields, though it lacks explicit 'ignore instructions' delimiters in the prompt templates.
- Capability inventory: The skill allows file writing and execution of the local
branch_map_svg.pyscript. - Sanitization: The visualization script implements HTML entity escaping for special characters to prevent injection into the resulting SVG file.
Audit Metadata