game-rules-engine

Warn

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The audit tool utilizes a sophisticated module loading system in scripts/lib/app-modules.mjs that registers Node.js module hooks and uses dynamic import() to execute TypeScript files from the target project.
  • The logic in scripts/lib/engine-run.mjs directly invokes functions (create, listMoves, etc.) from the loaded modules to verify their behavior.
  • [COMMAND_EXECUTION]: The skill instructions in SKILL.md and references/testing-rules.md recommend several shell commands for environment setup and auditing.
  • Example: node ${CLAUDE_SKILL_DIR}/scripts/check-rules-engine.mjs . --game <game-id>
  • Example: npm install -D -E fast-check@4.10.2
  • Example: npx jest src/games/<game-id> --ci --selectProjects unit
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of external dependencies from the NPM registry to support testing and auditing functionality.
  • The package.json fixture and SKILL.md instructions reference fast-check and expo.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 18, 2026, 11:23 AM