The game client reads only canonical game assets - you can't just add any nft willy nilly.

An nft can also include a hash of some offchain data. In this way it can make a verifiable claim about content.