godot-adapt-single-to-multiplayer

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides implementation patterns for receiving and processing untrusted data from network peers via Godot's RPC system.
  • Ingestion points: Data enters the system through RPC calls in scripts/net_prediction_reconciliation.gd, scripts/net_lag_compensation.gd, and scripts/rpc_bridge.gd.
  • Boundary markers: The instructions do not define explicit delimiters for separating network data from agent instructions, as it focuses on game engine logic.
  • Capability inventory: The skill possesses capabilities to modify physics states (PhysicsServer3D), instantiate scenes, and communicate over the network.
  • Sanitization: The skill explicitly teaches security best practices, including movement validation in scripts/net_auth_server_validator.gd and request throttling in scripts/net_rpc_rate_limiter.gd.
  • [SAFE]: The skill implements and advocates for security-first networking patterns, such as authoritative server design where the server validates all client actions to prevent cheating and state manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:01 PM