godot-adapt-desktop-to-mobile
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The script
scripts/offline_save_sync.gdcontains a hardcoded password string used for encrypting and decrypting save files.\n - Evidence:
FileAccess.open_encrypted_with_pass(SAVE_PATH, FileAccess.WRITE, "secure_mobile_key_123!")in the_force_save_to_diskfunction and the corresponding call in_load_game_data.\n - Risk: Hardcoding encryption keys is a critical security vulnerability as it makes the encryption keys easily discoverable by anyone with access to the source code or the compiled application, allowing unauthorized decryption or tampering of user data.
Recommendations
- AI detected serious security threats
Audit Metadata