godot
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and workflows for using the
godotcommand-line interface to perform development tasks such as running scenes, checking syntax, and exporting builds. This is standard functionality for the intended use case. - [EXTERNAL_DOWNLOADS]: The documentation references the GUT (Godot Unit Testing) framework, providing links to its official GitHub releases. This is a well-established community tool for Godot projects.
- [INDIRECT_PROMPT_INJECTION]: The skill includes Python scripts (
validate_tres.py,validate_tscn.py) and instructions for the agent to read and modify Godot project files. While this creates an ingestion surface for external project data, the risk is minimized by the use of specialized validation scripts and the narrow scope of the file formats handled.
Audit Metadata