security-audit

Audit game codebases for security vulnerabilities and produce a prioritized remediation report.

13|Updated Jul 30, 2026
One-click install
npx skills add https://github.com/frabcd/codex-ai-game-studio --skill security-audit-frabcd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/frabcd/codex-ai-game-studio/tree/main/plugins/ai-game-studio/skills/security-audit
Command: npx skills add https://github.com/frabcd/codex-ai-game-studio --skill security-audit-frabcd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Shipping a game without a security review leaves save files, network code, and player data exposed to tampering, cheating, and data leaks. This Skill systematically scans a game project for the most common security failures and produces a prioritized remediation plan before release. ## Core Features & Use Cases - Six audit categories: Covers save file and serialization security, network and multiplayer validation, input validation, data exposure, cheat and anti-tamper vectors, and dependency/supply chain risks. - Severity classification: Every finding is rated CRITICAL, HIGH, MEDIUM, or LOW with an attack scenario, remediation guidance, and effort estimate. - Release gate integration: The generated report is a required artifact for the Polish to Release gate, blocking launch until CRITICAL and HIGH findings are resolved. - Use Case: Before launching a multiplayer game, run a full audit to verify server-side authority, packet validation, and credential handling, then re-run in quick mode after fixes to confirm the release gate passes. ## Quick Start Ask the AI to run a full security audit on this game project and report any critical or high severity findings before release.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a game for security vulnerabilities before release?

Run the security audit in full mode to scan six categories: save files, networking, input validation, data exposure, cheat vectors, and dependencies. It produces a prioritized report with severity ratings and remediation steps required before the release gate passes.

What security checks should a multiplayer game pass before launch?

Multiplayer games need server-side authority over game state, packet validation for size and value ranges, rate limiting, secure token handling, and no debug endpoints in release builds. Any HIGH finding in a multiplayer context is treated as CRITICAL.

Does the security audit work for single-player games?

Yes, single-player games are audited for save file validation, path traversal, tamper detection, data exposure, and dependency risks. The network and multiplayer category is skipped when the project has no online features.

Can I run a faster security check during development?

Yes, the quick mode runs only high-severity checks for fast iterative use. Scoped modes for network, save, or input categories are also available when you only changed one area of the codebase.

Is this audit a replacement for a penetration test?

No, this audit covers common vulnerability patterns in code but is not a penetration test. A professional human pentest is recommended before launching any competitive or monetised multiplayer game.