Remix Agent Publish

• Analyzed: May 14, 2026, 3:49 AM
• Findings: 1
• Version: 0.1.0
• Hash: ead4180e3adca06200c27e885d59c2863af537116178259bcf58e4ffe2e09468
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to automate game publishing to remix.gg, providing clear instructions and code snippets for API interaction and game development. It explicitly advises secure handling of API keys via environment variables (`process.env.REMIX_API_KEY!`) and forbids insecure browser APIs like `localStorage` and `sessionStorage` in game code (`rules/game-creation-best-practices.md`, `references/game-sdk.md`). All external network calls are directed to the legitimate `api.remix.gg` domain or a standard CDN (`cdn.jsdelivr.net`) for the game SDK. There are no signs of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The instructions are aligned with the stated purpose and include guardrails for safe agent behavior.