3D Game Builder

• Outcome: Review
• Latest audit: May 29, 2026, 9:24 PM
• Version:
  1.2.0

Overview

The skill builds 3D browser games, but it also automatically publishes the generated game folder to a public hosting service without a clear per-run consent step.

Install only if you are comfortable with generated games being uploaded to a public here.now link by default. Avoid using private photos, secrets, proprietary text, or sensitive prompts with this skill, and review or remove progress.md and embedded assets before publishing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Description-Behavior Mismatch

Medium

• Confidence: 97% confidence
• Finding: The skill says it outputs a single local HTML file, but it also instructs the agent to publish the generated build to an external here.now service. That creates an undisclosed outbound data flow and can expose user prompts, embedded assets, or copyrighted/private content beyond the local environment.

Context-Inappropriate Capability

Medium

• Confidence: 95% confidence
• Finding: Publishing to a public live URL is not necessary for the core function of generating a browser game and therefore represents capability creep. Unnecessary external distribution increases the chance of accidental data exposure and violates least-privilege expectations for a build skill.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The instructions direct publication to a public URL without an upfront privacy warning or explicit consent checkpoint. Because game builds may include user-provided text, images, or generated content derived from private prompts, automatic publication materially increases the risk of unintended disclosure.

Ssd 3

Medium

• Confidence: 96% confidence
• Finding: Requiring publication of the build to a shareable URL can expose embedded assets, user-supplied images, and prompt-derived content outside the local environment. In this skill context, that risk is elevated because the instructions explicitly encourage ingesting reference images and embedding them into the output.

Ssd 3

Medium

• Confidence: 90% confidence
• Finding: The progress tracker stores the original user prompt and iteration history in /tmp/game-build/progress.md, which can retain sensitive or proprietary information longer than needed. Even if stored locally, persistent prompt logging increases exposure to later reads by other tools, users, or future runs.

VirusTotal

64/64 vendors flagged this skill as clean.