security-audit

Audit game codebases for security vulnerabilities and generate prioritized remediation reports.

1|Updated May 5, 2026
One-click install
npx skills add https://github.com/XGanQAQ/Unity-Claude-Code-Game-Studios --skill security-audit-xganqaq
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/XGanQAQ/Unity-Claude-Code-Game-Studios/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/XGanQAQ/Unity-Claude-Code-Game-Studios --skill security-audit-xganqaq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you identify common security weaknesses in a game so you can prevent save tampering, cheat vectors, network exploits, and sensitive data exposure before shipping.

Core Features & Use Cases

  • Prioritized security audit report: Produces a structured report with severity counts and a clear remediation priority order.
  • Mode-based scanning: Supports full audits plus focused runs for network/multiplayer, save/serialization, or input validation, including a fast quick mode.
  • Release gate readiness: Integrates with the Polish → Release gate by requiring no open CRITICAL or HIGH issues.

Quick Start

Run the security-audit in full mode by telling the AI: "Execute /security-audit full to scan the whole project for security issues and write the report to production/security/security-audit-[date].md".

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my game codebase for security vulnerabilities like save tampering and network exploits?

Game security audits identify cheat vectors, network exploits, and save tampering by scanning relevant files using selectable scopes like full, network, save, input, or quick modes to produce a prioritized remediation report.

What is the best way to check for input validation gaps in a multiplayer game before release?

Checking for input validation gaps uses a focused network scope security audit that classifies findings by severity and status, functioning as a release gate to ensure no open CRITICAL or HIGH vulnerabilities remain before shipping.

Can I scan only save serialization code for cheat prevention vulnerabilities?

Yes, you can scan only save serialization code by executing the security audit in save mode, which specifically targets save tampering and data exposure vulnerabilities within your game's serialization logic.

Does the security audit require external dependencies to scan for data exposure?

No, the security audit requires no external dependencies to scan for data exposure, coordinating a security-engineer task using built-in Grep, Glob, and Bash pattern scanning to identify vulnerabilities.

How do I get a fast security overview of my game codebase without a full scan?

To get a fast security overview without a full scan, execute the security audit in quick mode, which rapidly checks the codebase for common security weaknesses and cheat vectors before a detailed review.