Game Engine

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only web game development skill with normal game API examples and no evidence of hidden or harmful behavior.

Safe to install as a game-development reference. Before using its examples in a shipped game, review third-party dependencies and CDN sources, pin versions where practical, and make sensor, vibration, microphone, multiplayer, storage, and audio behavior clear to players with permission prompts and opt-out controls.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Low
Confidence
91% confidence
Finding
The template instructs use of Device Orientation and Vibration APIs but does not mention that motion sensor access may require explicit user permission on some platforms or that haptic feedback may affect users unexpectedly. In a reusable game-development skill, this omission can lead downstream developers to ship privacy- and UX-sensitive features without consent flows, disclosures, or accessibility controls.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The microphone-based gesture detection section discusses Doppler-style input without warning that such functionality requires microphone access and may capture sensitive ambient audio. In a skill meant to guide implementation, omitting privacy and consent considerations could lead downstream users to build features that request mic permissions without clear disclosure or minimization, creating privacy and trust risks.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal