MCP, MCP server
Game Studio Harness
Game Studio Harness（GSH）是面向完整游戏制作流水线的四层上下文操作系统。它把大模型代理接入制作与方向、策划、工程、品质、美术音频与活服运营。本轮范围写在文件合同里。技能按步打开。默认写入隔离面。正式面回写须制作方批准。
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT SECRETS_PATH_CREDENTIAL
Why this grade
- NETWORK_HOST_FROM_INPUT High
A file takes a URL or endpoint as input and has no fixed host list.
harness/mcp-boot/http_bridge.py, line 33
with socket.create_connection((host, port), timeout=timeout): - SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
gsh/natives.py, line 45
"Do not read `.env`, `credentials.json`, or private keys into the model.\n"
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
gsh/commands/uninstall.py, line 58
shutil.rmtree(path)
harness/mcp-boot/http_bridge.py, line 98
subprocess.Popen(
harness/mcp-boot/lazy_stdio.py, line 95
self.proc: subprocess.Popen | None = None
Show more
harness/mcp-boot/lazy_stdio.py, line 123
self.proc = subprocess.Popen(
harness/scripts/回归四层.py, line 29
return subprocess.run(
harness/scripts/回归四层.py, line 176
stop = subprocess.run(
harness/scripts/拉起外接.py, line 71
out = subprocess.check_output(
harness/scripts/拉起外接.py, line 84
subprocess.Popen(
harness/scripts/握手四层.py, line 28
return subprocess.run(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
harness/mcp-boot/http_bridge.py, line 33
with socket.create_connection((host, port), timeout=timeout):
harness/mcp-boot/http_bridge.py, line 57
with urllib.request.urlopen(req, timeout=timeout) as resp:
harness/scripts/拉起外接.py, line 59
with socket.create_connection((host, port), timeout=timeout):
Show more
harness/mcp-boot/cache/chrome-devtools.tools.json, line 155
"description": "A JavaScript function declaration to be executed by the tool in the target page.\nExample without arguments: `() => document.title` or `async () => await fetch(\"ex
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
gsh/natives.py, line 45
"Do not read `.env`, `credentials.json`, or private keys into the model.\n"
gsh/secret_scan.py, line 105
if path.name == ".env.example":
gsh/commands/verify.py, line 310
".env.example",
Show more
hooks/读文件前.py, line 9
r"^\.env$"
hooks/读文件前.py, line 10
r"|^\.env\.(?!example$)"
hooks/读文件前.py, line 15
r"|id_rsa"
.env.example, line 1
# EXAMPLE ONLY - copy to a local `.env`. Never commit a real `.env`.
.gitignore, line 8
# Secrets and credentials - never commit live values
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
harness/mcp-boot/cache/docker-mcp.tools.json, line 1
[
harness/mcp-boot/cache/materialpilot.tools.json, line 1
[
harness/mcp-boot/cache/tiled.tools.json, line 1
[
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 28624bc402ad. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 28624bc402ad943ded2e2b6ebf79f40953fcaebf
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.