running-headless-godot
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Instructions facilitate running Godot CLI commands for project tasks. The recommended patterns use environment variables to isolate configuration and logs to the project directory, ensuring that automated runs do not interfere with global user settings.- [DATA_EXFILTRATION]: The skill implements sandboxing techniques by explicitly redirecting Godot's data, config, and cache directories to project-local paths. This prevents unauthorized access or modification of global user data.- [REMOTE_CODE_EXECUTION]: Utility GDScripts are provided for scene editing and testing. These scripts are self-contained, validated, and restricted to Godot's internal APIs for scene manipulation, with no capabilities for arbitrary system command execution.- [INDIRECT_PROMPT_INJECTION]: A JSON-based scene patching mechanism is documented. The implementation uses a restricted script with explicit operation validation, maintaining a secure boundary for project modifications.
Audit Metadata