Game Design Prototyping Companion

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.1

Overview

This skill does what it says: helps document game prototype branches and can locally render a simple SVG map without hidden network or credential behavior.

Install this if you want an agent to maintain prototype branch notes and optionally generate SVG maps. Before using the visualization step, choose explicit input and output paths, avoid sensitive file locations, and review the generated SVG before sharing it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 88% confidence
• Finding: The visualization workflow tells the agent to write a JSON file and run a script to generate an SVG without warning about side effects or requiring consent. Even if the intended script is benign, silent file creation and execution can surprise users, overwrite data, or normalize unsafe execution patterns in environments where local scripts may have broader effects.

VirusTotal

67/67 vendors flagged this skill as clean.