godot-gdscript-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and educational GDScript templates for Godot 4.x game development. All patterns follow established engine best practices.
- [CREDENTIALS_UNSAFE]: A placeholder constant
const ENCRYPTION_KEY := "your_secret_key_here"is present in the save management example withinresources/implementation-playbook.md. This is a standard documentation practice for indicating where user-provided configuration is required and does not constitute a secret exposure. - [DATA_EXFILTRATION]: The skill demonstrates save system patterns using the Godot-native
user://path, which is an application-specific, sandboxed directory. It does not attempt to access sensitive user files or system directories. - [EXTERNAL_DOWNLOADS]: The skill references trusted resources including official Godot documentation and well-known community sites (GDQuest, KidsCanCode) for supplementary learning. No unverified remote code downloads are present.
- [COMMAND_EXECUTION]: Markdown backticks are correctly used to format file paths and GDScript snippets in
SKILL.mdand the playbook. These formatting elements do not include shell commands or instructions for agent-side execution. - [SAFE]: The inclusion of
skill-report.jsonprovides metadata regarding the skill's origin and versioning. While it contains self-audit conclusions, these were treated as data rather than authoritative findings, and no malicious patterns were detected within the file.
Audit Metadata