skills.rest
AnderHonorato
AnderHonoratoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Audits game codebases for security vulnerabilities and produces a prioritized remediation report.

Updated Aug 28, 2026
Search Tags:#game development#input validation#security audit#vulnerability scan#release gate#save tampering#multiplayer security
One-click install
npx skills add https://github.com/AnderHonorato/Mem-rias-IA---Infinity --skill security-audit-anderhonorato
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/AnderHonorato/Mem-rias-IA---Infinity/tree/main/Manus/Skills/snapshots/game-studio-security-audit
Command: npx skills add https://github.com/AnderHonorato/Mem-rias-IA---Infinity --skill security-audit-anderhonorato

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Shipping a game without a systematic security review leaves save tampering, cheat vectors, network exploits, and data exposure risks undetected until players exploit them. This Skill audits the codebase across six security categories and produces a prioritized report that gates public releases. ## Core Features & Use Cases - Six-Category Audit: Covers save/serialization security, network and multiplayer validation, input validation, data exposure, cheat and anti-tamper vectors, and dependency/supply-chain risks. - Severity Classification: Every finding is rated CRITICAL, HIGH, MEDIUM, or LOW with attack scenarios, remediation steps, and effort estimates. - Scoped Modes: Run full, network, save, input, or quick audits depending on the release stage and iteration speed needed. - Use Case: Before launching a multiplayer update, run a full audit to verify server-side authority, packet validation, and secret handling, then use the generated report as the required artifact for the Polish to Release gate. ## Quick Start Run a full security audit of the game codebase and generate the prioritized remediation report before the release gate.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a game for security vulnerabilities before release?▼

Run the audit in full mode to scan all six categories: save files, network, input validation, data exposure, cheat vectors, and dependencies. It produces a prioritized report with CRITICAL and HIGH findings that must be fixed before shipping.

What security checks apply to multiplayer game networking?▼

The network category verifies server-side authority over game state, packet validation for size and value ranges, rate limiting, token handling, and disabled debug endpoints. Any HIGH finding in a multiplayer context is treated as CRITICAL.

Does this audit work for single-player games?▼

Yes. Single-player games skip the network category but still get save tampering, input validation, data exposure, and dependency checks. Save file validation and hardcoded secret detection apply to every shipped game.

Can I run a faster audit during iteration instead of a full scan?▼

Use quick mode to run only high-severity checks, which is the fastest option for iterative use. Scoped modes like network, save, or input let you re-audit only the area you changed.

What are the limitations of an automated game security audit?▼

This audit covers common vulnerability patterns via static analysis and is not a penetration test. For competitive or monetized multiplayer launches, a manual pentest by a security professional is still recommended.

Related Skills

Explore More Software Engineering Skills→
Euraika-LabsEuraika-Labs
14

security-audit

Audit game codebases for security vulnerabilities and generate prioritized remediation reports.

Official
Advanced
tjsasakiflntjsasakifln
1

apply-qa-fixes

Applies QA gate findings to a story and hands it back for re-review.

Community
Intermediate
J-StaR-Films-StudiosJ-StaR-Films-Studios
23

security-audit

Audit codebases for security vulnerabilities, logical errors, and quality issues.

Official
Advanced
Ed1s0nZEd1s0nZ
6.2k

source-code-hunting

Hunt source code leaks, hardcoded secrets, and supply-chain risks using grep, semgrep, and trufflehog.

Community
Intermediate