The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides patterns for creating and managing animations that rely on string-based identifiers for methods and resource paths. \n
SKILL.md and scripts/method_track_logic.gd demonstrate using Method Tracks to call arbitrary functions on nodes using string keys.\n
scripts/runtime_anim_lib_swapper.gd shows loading resources using load() with a variable path.\n
These patterns represent attack surfaces where untrusted data (such as an external animation definition file) could influence code execution or load unintended resources if not properly sanitized by the implementing agent.\n- [DYNAMIC_EXECUTION]: The skill utilizes dynamic behavior essential to Godot's animation system.\n
scripts/animation_sequencer.gd uses Callable.call() to execute functions passed in a sequence dictionary at runtime.\n
scripts/runtime_anim_lib_swapper.gd uses the load() function to dynamically include resource files at runtime based on calculated paths.\n
scripts/method_track_logic.gd and the SKILL.md guide show how to configure method tracks that invoke node functions by name.\n
While these are standard practices for the intended use case, they constitute dynamic execution surfaces that require careful handling to prevent the execution of untrusted logic.

godot-animation-player