skills.rest
claretagrapelike32
claretagrapelike32COMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit game codebases for security vulnerabilities and generate a prioritized remediation report.

Updated Aug 2, 2026
Search Tags:#security audit#vulnerability scan#network security#anti-cheat#release gate#game security#save tampering
One-click install
npx skills add https://github.com/claretagrapelike32/codex-ai-game-studio --skill security-audit-claretagrapelike32
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/claretagrapelike32/codex-ai-game-studio/tree/main/plugins/ai-game-studio/skills/security-audit
Command: npx skills add https://github.com/claretagrapelike32/codex-ai-game-studio --skill security-audit-claretagrapelike32

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Shipping a game without a security review leaves it exposed to save tampering, cheat vectors, network exploits, and credential leaks. This Skill systematically scans a game codebase for common security failures and produces a prioritized remediation plan before release. ## Core Features & Use Cases - Six-Category Audit: Covers save file and serialization security, network and multiplayer validation, input validation, data exposure, cheat and anti-tamper vectors, and dependency/supply chain risks. - Severity Classification: Every finding is rated CRITICAL, HIGH, MEDIUM, or LOW with attack scenarios, remediation steps, and effort estimates. - Release Gate Integration: Produces a required artifact for the Polish → Release gate, blocking shipment when CRITICAL or HIGH findings remain open. - Use Case: Before launching a multiplayer game, run a full audit to verify server-side authority, packet validation, and that no API keys are hardcoded in source files. ## Quick Start Ask the AI to run a full security audit on the game project and report any critical or high severity vulnerabilities before release.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a game for security vulnerabilities before release?▼

Run the security audit in full mode, which scans six categories: save files, networking, input validation, data exposure, cheat vectors, and dependencies. It produces a prioritized report with severity ratings and remediation steps for each finding.

What security checks apply to multiplayer games?▼

The network category verifies server-side authority over game state, packet validation for size and value ranges, rate limiting, authentication token handling, and absence of debug endpoints in release builds. Any HIGH finding in a multiplayer context is treated as CRITICAL.

Can I run a quick security check instead of a full audit?▼

Yes, the quick mode runs only high-severity checks for fast iterative use. Other scoped modes include network, save, and input, letting you target specific attack surfaces without a full scan.

Does this audit work for single-player games?▼

Yes, single-player games still face save tampering, path traversal, and data exposure risks. The audit skips the network category when the project configuration indicates no multiplayer features.

Is this audit a replacement for penetration testing?▼

No, it covers common vulnerability patterns in code but is not a penetration test. A professional human pentest is recommended before launching any competitive or monetised multiplayer game.

Related Skills

Explore More Software Engineering Skills→
polsegupolsegu

security-audit

Audit game codebases and assets for security vulnerabilities across saves, networking, and dependencies.

Community
Advanced
tjsasakiflntjsasakifln
1

apply-qa-fixes

Applies QA gate findings to a story and hands it back for re-review.

Community
Intermediate
TencentCloudBaseTencentCloudBase
1.1k

codebase-audit

Audit source code for security vulnerabilities, logic bugs, and quality issues.

Official
Advanced
langbyyilangbyyi
96

api-sec

Triage API security testing across REST, GraphQL, SOAP, and WebSocket interfaces.

Community
Intermediate