godot-project-foundations

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: The skill provides standard Godot 4 boilerplate and development tools. All file system operations are performed using Godot's DirAccess, FileAccess, and ResourceSaver APIs, restricted to the project's internal paths (res://) or the local user data folder (user://).
  • [COMMAND_EXECUTION]: Several scripts are designed as EditorScript tools to automate project setup. These scripts manage directory structures and create boilerplate files (scripts, scenes, and documentation) to enforce project organization.
  • Evidence: scripts/project_bootstrapper.gd and scripts/feature_scaffolder.gd automate the creation of feature-based folder structures using DirAccess and FileAccess.
  • [DYNAMIC_EXECUTION]: The scaffolding logic involves generating GDScript files from internal string templates. This is a common developer productivity pattern and does not involve executing untrusted code or remote payloads.
  • Evidence: scripts/feature_scaffolder.gd writes new .gd files based on user-defined feature names.
  • [DATA_EXPOSURE]: The telemetry script is designed to capture engine logs for debugging purposes. The implementation provided stores logs in a local array and does not include network transmission logic.
  • Evidence: scripts/advanced_telemetry_logger.gd implements a custom Logger to intercept engine output.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:01 PM