ClawHub
Back to skill

Security audit

OpenGame Browser Game Builder

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward browser game prototyping guide with no hidden scripts, persistence, or sensitive data access.

Installers should expect this skill to guide an agent through browser-game planning, coding, and playtesting. Review any generated game code and run commands as usual, especially if a project uses external dependencies, but the skill itself does not introduce hidden execution or sensitive access.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Low
Confidence
89% confidence
Finding
The description says to use the skill whenever a user asks to 'improve a game's controls, mechanics, progression, or game-feel,' which is broad and could overlap with many ordinary game-development requests. It does not provide exclusion conditions or narrower trigger constraints to distinguish when this skill should activate versus other coding or design skills.

Static analysis

No suspicious patterns detected.