se-dev-game-code

Warn

Audited by Socket on May 9, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
Prepare.bat

This script is a build/decompile bootstrapper, but it contains multiple high-impact supply-chain execution patterns: it executes a remote PowerShell installer via `iex` with `ExecutionPolicy ByPass`, and it downloads a remote executable (busybox) that is then used to run a local decompilation script. Additionally, it installs dotnet global tools without pinning the package source beyond version, and it depends on unpinned executables from PATH. No clear evidence of credential theft, crypto-mining, or direct exfiltration is present in this batch fragment, but the supply-chain and execution-of-downloaded-code risks are significant. Overall: potentially safe for its intended purpose, yet high risk from a supply-chain perspective due to remote code execution during setup.

Confidence: 72%Severity: 64%
AnomalyLOW
Prepare.md

The provided fragment is primarily a gate-and-execute wrapper around an unshown `Prepare.bat`. While there is no direct evidence of malicious behavior in the wrapper itself, the dominant supply-chain risk is that arbitrary commands may run inside `Prepare.bat` with the user’s privileges, with success determined only by a log string (`DONE`). Filesystem wiping/rebuilding under `%USERPROFILE%` and persistence of outputs via a local Git history further increase impact if the preparation process is compromised. Review and validate `Prepare.bat` (and any tools it invokes or downloads) before use.

Confidence: 46%Severity: 63%
Audit Metadata
Analyzed At
May 9, 2026, 09:11 PM
Package URL
pkg:socket/skills-sh/viktor-ferenczi%2Fse-dev-skills%2Fse-dev-game-code%2F@1334cd627998ed6405bf17644eb3970f74731ecd
Security Audit — socket — se-dev-game-code