godot-genre-idle-clicker
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses entirely on mathematical logic and game systems for the idle genre. The economic systems use mantissa-exponent math to prevent floating-point overflows, and the UI logic is correctly decoupled using Godot's signal system.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of game saves (JSON format). However, the implementation is safe as it strictly converts incoming data to numeric types (using
to_float()andint()) before use, and the skill lacks dangerous capabilities like shell execution or network exfiltration that could be exploited via injection. - [COMMAND_EXECUTION]: All code is written in GDScript and performs standard game engine operations. No subprocesses or system commands are invoked.
- [DATA_EXFILTRATION]: Local file access is limited to the
user://directory for persistent game state (e.g.,user://offline_save.json), which is the standard, sandboxed location for Godot game data.
Audit Metadata