phaser4-game-ui-layout
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the instructions or the associated validation scripts. The skill is designed for game development UI workflows.
- [DATA_EXPOSURE]: The provided Node.js scripts include a validation function
checkContractFilesthat reads local files to verify their existence as part of the layout contract. This function implements robust path traversal protection by ensuring that all paths are resolved within the designated project root and do not escape via '..' or absolute paths. - [DYNAMIC_EXECUTION]: The skill uses
JSON.parseto process layout contracts. It does not employ dangerous dynamic execution functions likeeval()orexec(). The logic is strictly focused on data validation and geometric calculations. - [PROMPT_INJECTION]: The instructional content follows best practices for AI agent directives. There are no attempts to override safety filters, extract system prompts, or bypass ethical guidelines.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute code from external or untrusted sources. All script references point to local files or sibling skill directories within the expected project structure.
Audit Metadata