game-version-compare
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill follows security best practices for its intended data analysis functionality.
- [COMMAND_EXECUTION]: The Python scripts scripts/batch_event_compare.py and scripts/retention_diff.py utilize subprocess.run to execute the ae-cli command-line tool. These calls are implemented using argument arrays, which prevents shell injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data and user-provided version metadata.
- Ingestion points: Data retrieved from the project database via ae-cli and version metadata provided by the user.
- Boundary markers: Absent.
- Capability inventory: The skill generates SQL queries and executes system commands through the ae-cli interface.
- Sanitization: The scripts/retention_diff.py script validates database table references using a strict regular expression and utilizes specialized parameter syntax for SQL values to mitigate injection risks.
Audit Metadata