setup-godot-project
Warn
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches GUT (Grand Unified Test) framework archives from external URLs. These downloads are performed to install testing infrastructure into the project's
addons/directory. - [REMOTE_CODE_EXECUTION]: Remote scripts downloaded as part of the GUT framework are executed via the Godot binary using the
--scriptflag. The skill also executes local project verification scripts such astests/verify_runtime.gd. - [PRIVILEGE_ESCALATION]: The skill offers to persistently modify the system
PATHenvironment variable to ensure Godot and other tools are available. This represents a change to the user's shell environment and is subject to explicit approval. - [COMMAND_EXECUTION]: The skill invokes various command-line tools including
godot,just, andgitto reconcile project state and run validation tests. - [INDIRECT_PROMPT_INJECTION]: The skill reads existing configuration files from the project directory, which serves as a potential vector for indirect instructions.
- Ingestion points: Processes
project.godot,Justfile,plugin.cfg, and.gitignorefrom the repository. - Boundary markers: Uses specific managed comment markers (e.g.,
<!-- setup-godot-project:<key>:start -->) to delimit generated infrastructure. - Capability inventory: Includes file creation/deletion, shell command execution, and environment variable modification.
- Sanitization: The analysis did not identify explicit sanitization routines for data ingested from the repository files.
Audit Metadata