On our website we have an HTML5 arcade. For each game it has an embed this game on your website copy + paste code box.

We've done the approval process of games as strictly and safely as possible, we don't actually think it is possible to have any malicious code in the games. However, we are aware that there's a bunch of people out there smarter than us and they might be able to exploit it.

For webmasters wanting to copy + paste our games on their websites, we want to warn them that they are doing it at their own risk - but could we be held responsible if say for instance a malicious game was hosted on an important website and it stole their users credentials and cause them damage?

I'm wondering if having an HTML comment in the copy + paste code saying "Use at your own risk" is sufficient.