security-audit

Scan game codebases for security vulnerabilities and generate prioritized remediation reports.

Updated May 13, 2026
One-click install
npx skills add https://github.com/FrancisVarga/the-dream-machine --skill security-audit-francisvarga
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/FrancisVarga/the-dream-machine/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/FrancisVarga/the-dream-machine --skill security-audit-francisvarga

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reduces the risk of exploitable weaknesses by auditing a game for common security failures that can lead to save tampering, cheating, data exposure, and unsafe input handling.

Core Features & Use Cases

  • Prioritized security audit report: Produces a production-ready report organized by severity with clear remediation guidance for each finding.
  • Mode-based scanning: Supports full, network, save, input, and quick scopes so teams can run targeted audits at different stages of development.
  • Pre-release gate integration: Helps ensure Polish → Release gating passes by blocking public release when CRITICAL or HIGH findings remain.

Quick Start

Run the security-audit skill in full mode to scan all applicable categories and generate the prioritized report for remediation.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find and fix game security vulnerabilities before release?

To find and fix game security vulnerabilities before release, run a full-mode security audit to scan for save tampering, multiplayer cheat vectors, data exposure, and input validation gaps, generating a prioritized remediation report.

How does a pre-release security gate handle critical findings in a game codebase?

A pre-release security gate blocks public release when CRITICAL or HIGH findings remain in the audit. It validates Polish → Release readiness by requiring resolution of identified multiplayer exploit paths and data exposure risks.

Can I run a targeted security audit for just multiplayer cheating risks?

Yes, you can run a targeted security audit for multiplayer cheating risks by using network-scoped mode. This isolates network exploit paths and multiplayer cheat vectors without scanning save tampering or input validation categories.

What is the best way to audit save tampering and input validation gaps in a game?

The best way to audit save tampering and input validation gaps is executing save and input-scoped security audits. These modes identify unsafe input handling and save file exploit paths, producing severity-ordered remediation guidance.

Does a game security audit require dependency inventory scanning?

A game security audit evaluates dependency inventory alongside data exposure and network exploit paths. It scans the codebase for common security failures across multiple categories to ensure comprehensive pre-release readiness.

When should I not use a full security audit scan for my game?

You should not use a full security audit scan when time is constrained or targeting a specific feature update; instead, use quick scope for rapid checks or network scope when following up on disk and network-using features.