headless-godot
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON data to modify Godot scene files, creating a vulnerability surface where untrusted input could influence the structural integrity of project scenes.
- Ingestion points: The
tools/godot_apply_patch.gdscript ingests patch definitions from JSON files specified via command-line arguments. - Boundary markers: Documentation defines a specific JSON schema for scene operations and mandates a
--dry-runvalidation step. - Capability inventory: The skill facilitates file reading/writing (TSCN, GDScript, JSON), Godot node instantiation, and property modification.
- Sanitization: The patching utility performs checks to ensure file paths are absolute or use the Godot-internal
res://protocol, providing some protection against path traversal. - [COMMAND_EXECUTION]: The skill provides instructions for executing Godot CLI commands, including scene exports and script runs. These commands interact directly with the host filesystem and environment variables, though they are restricted to the project scope and project-local paths.
Audit Metadata