Security audit

游戏

Security checks for vulnerabilities and agentic risk

Overview

This game-generation skill is not clearly malicious, but it requests command execution and describes broad API and file capabilities beyond the stated single-file game purpose.

Review this skill before installing. It appears aimed at game creation, but it gives the agent command-execution authority and discusses external API use; only use it in a sandboxed workspace, confirm before it runs commands or installs packages, and prefer pinned dependency versions.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:16
Finding: Unnecessary General-Purpose Command Execution Permission
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:414
Finding: Unpinned Third-Party npm Dependencies
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill is presented as a game-generation tool, but its manifest grants broad read/exec/write capabilities that go beyond the narrowly described purpose. That overbreadth increases the chance that user-controlled input could be turned into filesystem changes or command execution, especially because the documentation later discusses command execution and environment troubleshooting as normal behavior.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill advertises file writing, API integration, and command execution without prominent, user-facing warnings or consent boundaries for those impactful actions. In practice, this can mislead users into invoking the skill as if it only generates code, while the agent may also modify files, run commands, or contact external services.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The documentation introduces generic API integration, command execution, and network/error-handling behavior that is not clearly necessary for a game-design skill. This scope expansion is risky because it normalizes outbound communication and system interaction, making it easier to justify unsafe actions from loosely specified user prompts.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The skill metadata and main documentation are predominantly in Chinese, with no indication that users can choose another language or locale. For a general-purpose skill, forcing a single language presentation without opt-in can violate language/locale policy expectations.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.