godot-platform-vr
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of standard Godot Engine GDScript implementations for VR mechanics such as OpenXR initialization, hand tracking, locomotion, and physics-based interactions. All operations are confined to the game engine's internal APIs (XRServer, XRInterface, AudioServer).
- [INDIRECT_PROMPT_INJECTION]: The skill ingests hardware-level data from XR devices (e.g.,
XRServer.get_play_area(),XRController3Dbutton events, andXRHandModifier3Djoint data). These data sources are not capable of carrying natural language instructions that could influence the agent's logic. The available capabilities (e.g.,reparent(),trigger_haptic_pulse(),move_and_slide()) are restricted to managing the game's scene tree and user feedback, presenting no risk of downstream privilege escalation or data exfiltration. - [NO_CODE]: No external binary dependencies, shell scripts, or remote code patterns were found. All scripts are local GDScript files that do not involve network operations or sensitive file system access.
Audit Metadata