Reset World
Resets game databases and generates new universes with quest definitions, ensuring safe production environment handling.
Install this skill
or
67/100
Security score
The Reset World skill was audited on May 20, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 83
Template literal with variable interpolation in command context
SourceSKILL.md
| 83 | ```bash |
medium line 7
Access to .env file
SourceSKILL.md
| 7 | Production (`.env.cloud`) is destructive and irreversible. It is **only** allowed when ALL of these are true: |
low line 16
Access to .env file
SourceSKILL.md
| 16 | scripts/reset-world.sh --env .env.cloud --allow-production [sector_count] [seed] |
medium line 25
Access to .env file
SourceSKILL.md
| 25 | - `local` → env file: `.env.supabase` |
medium line 26
Access to .env file
SourceSKILL.md
| 26 | - `dev` → env file: `.env.cloud.dev` |
medium line 27
Access to .env file
SourceSKILL.md
| 27 | - `prod` / `production` → env file: `.env.cloud` (requires explicit chat confirmation, see above) |
low line 41
Access to .env file
SourceSKILL.md
| 41 | ref=$(grep '^SUPABASE_URL=' .env.cloud.dev | sed 's|.*//||;s|\..*||') |
low line 43
Access to .env file
SourceSKILL.md
| 43 | ref=$(grep '^SUPABASE_URL=' .env.cloud | sed 's|.*//||;s|\..*||') |
low line 67
Access to .env file
SourceSKILL.md
| 67 | scripts/reset-world.sh --env .env.cloud.dev --confirm-ref "$ref" <sector_count> [seed] |
low line 72
Access to .env file
SourceSKILL.md
| 72 | echo "DESTROY PRODUCTION" | scripts/reset-world.sh --env .env.cloud --allow-production <sector_count> [seed] |
low line 95
Access to .env file
SourceSKILL.md
| 95 | scripts/setup-production-combat-tick.sh --env .env.cloud.dev --confirm-ref "$ref" |
low line 100
Access to .env file
SourceSKILL.md
| 100 | scripts/setup-production-combat-tick.sh --env .env.cloud --allow-production |
low line 87
External URL reference
SourceSKILL.md
| 87 | ('supabase_url', '${SUPABASE_INTERNAL_URL:-http://host.docker.internal:54321}', 'Base Supabase URL reachable from the DB container'), |
Scanned on May 20, 2026
View Security Dashboard