dayz-test-ingame
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the execution of various local tools and scripts. It generates Batch files (server.bat, client.bat, offline.bat) and uses PowerShell to orchestrate the DayZ modding workflow. It also invokes AddonBuilder.exe and DayZDiag_x64.exe with user-provided and calculated arguments to build and run the game.
- [DYNAMIC_EXECUTION]: In the Invoke-ManagedStart function within templates/dayz-test.ps1, the skill dynamically creates a temporary Python script (dayz-mcp-lifecycle-finalize-*.py) at runtime. This script is used to canonically hash and finalize JSON launch requests before being executed by a local Python interpreter located in a virtual environment (.venv-mcp).
- [PRIVILEGE_ESCALATION]: The provided Batch templates and the primary PowerShell script utilize the -ExecutionPolicy Bypass flag to execute scripts, circumventing local PowerShell security policies. The skill also performs registry modifications to the HKCU\Software\Valve\Steam\ActiveProcess key to manage and fix Steam process ID issues during client launch.
- [CREDENTIALS_UNSAFE]: The skill manages environment variables such as DAYZ_MCP_CLIENT_ID_JSON and DAYZ_MCP_LEASE_TOKEN, which contain sensitive authentication data for a local management daemon. It also handles VPPAdminTools passwords (AdminPass) and seeds them into a local credentials.txt file. While it includes instructions to avoid logging these values, their presence in the process environment is a security consideration.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it reads and parses external game logs (script.log and *.RPT files) to monitor test progress and determine functional readiness. Maliciously crafted mod output could theoretically influence the agent's interpretation of the test results.
- Ingestion points: Reading of game and tool logs via Get-Content in templates/dayz-test.ps1.
- Boundary markers: None identified in the log processing logic.
- Capability inventory: Extensive capabilities including file system writes, process execution, and registry manipulation.
- Sanitization: The script implements argument quoting but lacks comprehensive sanitization for content ingested from external log files.
Audit Metadata