phaser-coder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform technical validation. It instructs the agent to run npx tsc --noEmit and a playtest script at ${CLAUDE_PLUGIN_ROOT}/skills/phaser-playtest/scripts/playtest.mjs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied game requirements to modify code, which is a vector for indirect injection. 1. Ingestion points: User requests for game features and scenes in references/agent-guidance.md. 2. Boundary markers: Absent. 3. Capability inventory: Access to Bash, Write, Edit, and WebFetch tools as listed in references/agent-guidance.md. 4. Sanitization: Absent.
Audit Metadata