setup-godot-project

Warn

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches GUT (Grand Unified Test) framework archives from external URLs. These downloads are performed to install testing infrastructure into the project's addons/ directory.
  • [REMOTE_CODE_EXECUTION]: Remote scripts downloaded as part of the GUT framework are executed via the Godot binary using the --script flag. The skill also executes local project verification scripts such as tests/verify_runtime.gd.
  • [PRIVILEGE_ESCALATION]: The skill offers to persistently modify the system PATH environment variable to ensure Godot and other tools are available. This represents a change to the user's shell environment and is subject to explicit approval.
  • [COMMAND_EXECUTION]: The skill invokes various command-line tools including godot, just, and git to reconcile project state and run validation tests.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads existing configuration files from the project directory, which serves as a potential vector for indirect instructions.
  • Ingestion points: Processes project.godot, Justfile, plugin.cfg, and .gitignore from the repository.
  • Boundary markers: Uses specific managed comment markers (e.g., <!-- setup-godot-project:<key>:start -->) to delimit generated infrastructure.
  • Capability inventory: Includes file creation/deletion, shell command execution, and environment variable modification.
  • Sanitization: The analysis did not identify explicit sanitization routines for data ingested from the repository files.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 6, 2026, 12:37 AM
Security Audit — agent-trust-hub — setup-godot-project