The Agent Skills Directory

[DYNAMIC_EXECUTION]: The revival_checkpoint_persistence.gd script utilizes ResourceLoader.load() to restore player state from user://checkpoint_data.res. Within the Godot engine, loading serialized resource files serves as a form of dynamic execution, as resources can encapsulate scripts or properties that execute logic when the resource is instantiated. While standard for local state persistence, this pattern presents a risk if the local file is modified by an external process.
[INDIRECT_PROMPT_INJECTION]: The revival_death_analytics.gd script implements a logging mechanism for death events that captures cause and peer_id data. In a multiplayer context where this data is received from remote clients, it creates an attack surface for injecting data into local logs.
Ingestion points: The cause and peer_id parameters within the log_death function in scripts/revival_death_analytics.gd.
Boundary markers: The script lacks explicit delimiters or warnings to isolate potentially untrusted input within the log file, although it uses standard JSON serialization.
Capability inventory: The skill is capable of performing file system write operations through the FileAccess API.
Sanitization: Input data is serialized via JSON.stringify, but no specific validation or filtering is performed on the content of the cause string before logging.

godot-mechanic-revival