build-live-game
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalyreferences/achievements.md
LOWAnomalyLOW
references/achievements.md
No clear malicious behavior or supply-chain malware is present. The code is readable and uses expected Unity Cloud Save, Remote Config, Authentication, and Cloud Code APIs. Security risk is primarily achievement-integrity and configuration correctness: server endpoints trust client-controlled identifiers and progress, progress is likely double-counted, and reset behavior is inconsistent with the protected-write design. Server-side validation and correction of the reset and progress logic are required for anti-cheat use.
Confidence: 94%Severity: 58%
Audit Metadata