godot-project-foundations
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides standard Godot 4 boilerplate and development tools. All file system operations are performed using Godot's
DirAccess,FileAccess, andResourceSaverAPIs, restricted to the project's internal paths (res://) or the local user data folder (user://). - [COMMAND_EXECUTION]: Several scripts are designed as
EditorScripttools to automate project setup. These scripts manage directory structures and create boilerplate files (scripts, scenes, and documentation) to enforce project organization. - Evidence:
scripts/project_bootstrapper.gdandscripts/feature_scaffolder.gdautomate the creation of feature-based folder structures usingDirAccessandFileAccess. - [DYNAMIC_EXECUTION]: The scaffolding logic involves generating GDScript files from internal string templates. This is a common developer productivity pattern and does not involve executing untrusted code or remote payloads.
- Evidence:
scripts/feature_scaffolder.gdwrites new.gdfiles based on user-defined feature names. - [DATA_EXPOSURE]: The telemetry script is designed to capture engine logs for debugging purposes. The implementation provided stores logs in a local array and does not include network transmission logic.
- Evidence:
scripts/advanced_telemetry_logger.gdimplements a customLoggerto intercept engine output.
Audit Metadata