phaser4-game-orchestrator
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The initialization script
scripts/initialize_project_docs.mjsexecutes a local workflow control CLI usingnode:child_process.spawnSync. Furthermore, the documentation inreferences/local-service-validation.mddirects the agent to utilize PowerShell 7 to inspect network ports and system processes to manage local service instances.- [DYNAMIC_EXECUTION]: The project initialization utility dynamically executes subprocesses based on local path resolution to perform preflight checks.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted game design and technical specifications. Ingestion points: Untrusted data enters the context throughGDD.md,TDD.md, and Work Item definitions. Boundary markers: The skill explicitly enforces a multi-stage verification framework (F0-F4) and Approval Ledgers to mitigate risks. Capability inventory: The skill utilizes subprocess execution, file system writes for template generation, and local network operations for service health checks. Sanitization: Path validation is performed usingpath.resolveand file existence checks in the initialization scripts.
Audit Metadata