The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a utility script scripts/detect_gpc.mjs that uses execSync to run environment verification commands like gpc --version and gpc auth status. These commands use hardcoded strings and do not interpolate user-provided input, posing no command injection risk.
[EXTERNAL_DOWNLOADS]: The detection script attempts to locate the gpc tool using npx, which is the standard behavior for the CLI tool this skill is designed to manage. This is a legitimate dependency for the skill's primary purpose.
[DATA_EXPOSURE]: The skill references standard secret management practices, such as using environment variables (GPC_SERVICE_ACCOUNT, GPC_GAME_ID) and configuration files (.gpcrc.json) for authentication. The provided scripts only check for the presence or status of these configurations locally and do not exfiltrate sensitive data.

gpc-games