build-live-game

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
references/achievements.md

No clear malicious behavior or supply-chain malware is present. The code is readable and uses expected Unity Cloud Save, Remote Config, Authentication, and Cloud Code APIs. Security risk is primarily achievement-integrity and configuration correctness: server endpoints trust client-controlled identifiers and progress, progress is likely double-counted, and reset behavior is inconsistent with the protected-write design. Server-side validation and correction of the reset and progress logic are required for anti-cheat use.

Confidence: 94%Severity: 58%
Audit Metadata
Analyzed At
Sep 10, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/unity-technologies%2Funity-agent-plugin%2Fbuild-live-game%2F@5cf3c2114240d1b90070853f36ffb105b4db9a2841291106cca2c99ce8a3541b
Security Audit — socket — build-live-game