Audit the game for security vulnerabilities: save tampering, cheat vectors, network exploits, data exposure, and input validation gaps. Produces a prioritised security report with remediation guidance. Run before any public release or multiplayer launch.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Security Audit
Security is not optional for any shipped game. Even single-player games have
save tampering vectors. Multiplayer games have cheat surfaces, data exposure
risks, and denial-of-service potential. This skill systematically audits the
codebase for the most common game security failures and produces a prioritised
remediation plan.
**Run this skill:**
- Before any public release (required for the Polish → Release gate)
- Before enabling any online/multiplayer feature
- After implementing any system that reads from disk or network
- When a security-related bug is reported
**Output:** `production/security/security-audit-[date].md`
---
## Phase 1: Parse Arguments and Scope
**Modes:**
- `full` — all categories (recommended before release)
- `network` — network/multiplayer only
- `save` — save file and serialization only
- `input` — input validation and injection only
- `quick` — high-severity checks only (fastest, for iterative use)
- No argument — run `full`
Read `docs/framework/technical-preferences.md` to determine:
- Engine and language (affects which patterns to search for)
- Target platforms (affects which attack surfaces apply)
…
The line at the top of this page pins the label git:20260622.695134d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_trtnjhawsnimxgvi
GET https://markdownregistry.com/api/v1/resolve?ref=striderza/opencodegamestudios/security-audit
GET https://markdownregistry.com/api/v1/blob/3e912b17ea3af31391bf787bd3080492460af68ddb6b5f9456f572f1f4566e0f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
striderza/opencodegamestudios · .agents/modules/architecture/skills/architecture-review/SKILL.md · Validates completeness and consistency of the project architecture against all GDDs. Builds a traceability matrix…
striderza/opencodegamestudios · .agents/modules/architecture/skills/create-control-manifest/SKILL.md · After architecture is complete, produces a flat actionable rules sheet for programmers — what you must do, what you…
striderza/opencodegamestudios · .agents/modules/architecture/skills/propagate-design-change/SKILL.md · When a GDD is revised, scans all ADRs and the traceability index to identify which architectural decisions are now…
striderza/opencodegamestudios · .agents/modules/art/skills/art-bible/SKILL.md · Guided, section-by-section Art Bible authoring. Creates the visual identity specification that gates all asset…
striderza/opencodegamestudios · .agents/modules/art/skills/art-generate/SKILL.md · Generates placeholder .aseprite files from asset specs using the Aseprite MCP. Reads asset specs and art bible, creates…
striderza/opencodegamestudios · .agents/modules/art/skills/asset-audit/SKILL.md · Audits game assets for compliance with naming conventions, file size budgets, format standards, and pipeline…
striderza/opencodegamestudios · .agents/modules/art/skills/asset-spec/SKILL.md · Generate per-asset visual specifications and AI generation prompts from GDDs, level docs, or character profiles…
striderza/opencodegamestudios · .agents/modules/core/skills/architecture-decision/SKILL.md · Creates an Architecture Decision Record (ADR) documenting a significant technical decision, its context, alternatives…
striderza/opencodegamestudios · .agents/modules/core/skills/concept-brainstorm/SKILL.md · Guided game concept ideation — from zero idea to a structured game concept document. Uses professional studio ideation…
striderza/opencodegamestudios · .agents/modules/core/skills/create-architecture/SKILL.md · Guided, section-by-section authoring of the master architecture document for the game. Reads all GDDs, the systems…
striderza/opencodegamestudios · .agents/modules/core/skills/gate-check/SKILL.md · Validate readiness to advance between development phases. Produces a PASS/CONCERNS/FAIL verdict with specific blockers…
maxmiksa/auto-company · .claude/skills/security-audit/SKILL.md · Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing…
cowork-os/cowork-os · resources/skills/security-audit/SKILL.md · Answer security questions about code, review a file or change for vulnerabilities, or run a full multi-agent audit of a…
