Skip to main content

dev-multiplayer-colyseus-server

Facilitates the setup of a Colyseus multiplayer server with room handlers and lifecycle events for real-time gaming experiences.

Install this skill

or
58/100

Security score

The dev-multiplayer-colyseus-server skill was audited on Feb 9, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 55

Template literal with variable interpolation in command context

SourceSKILL.md
55console.log(`Colyseus server listening on wss://localhost:${port}`);
medium line 69

Template literal with variable interpolation in command context

SourceSKILL.md
69console.log(`[GameRoom] Created: ${this.roomId}`);
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104console.log(`[GameRoom] Disposed: ${this.roomId}`);
medium line 237

Template literal with variable interpolation in command context

SourceSKILL.md
237console.log(`[Room ${this.roomId}] Created with options:`, options);
medium line 247

Template literal with variable interpolation in command context

SourceSKILL.md
247console.log(`[Room ${this.roomId}] Client joined: ${client.sessionId}`);
medium line 259

Template literal with variable interpolation in command context

SourceSKILL.md
259console.log(`[Room ${this.roomId}] Client left: ${client.sessionId} (consented: ${consented})`);
medium line 266

Template literal with variable interpolation in command context

SourceSKILL.md
266console.log(`[Room ${this.roomId}] Disposed`);
medium line 298

Template literal with variable interpolation in command context

SourceSKILL.md
298console.log(`Unhandled message: ${type}`, data);
low line 29

Access to .env file

SourceSKILL.md
29const port = Number(process.env.PORT) || 2567;
low line 161

Access to .env file

SourceSKILL.md
161if (process.env.NODE_ENV !== 'production') {
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →