godot-prompter-mobile-development
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard command-line instructions for mobile development, including
keytoolfor generating Android keystores,adb logcatfor viewing device logs, andndk-stackfor symbolicating native crash traces. These are routine tasks for mobile game development and maintenance. - [EXTERNAL_DOWNLOADS]: The documentation references official Godot native debug symbols and community-maintained plugin templates on GitHub. These links provide developers with access to legitimate tools and starting points for their own mobile extensions.
- [DYNAMIC_EXECUTION]: The instructions cover the
JavaClassWrapperAPI (introduced in Godot 4.4), which enables calling Android Java/Kotlin classes directly from scripts. The skill demonstrates safe and intended usage of this feature for basic platform tasks such as triggering vibration, showing UI toasts, and using the system printer. - [INDIRECT_PROMPT_INJECTION]: The skill outlines how to process system events, such as application lifecycle notifications and permission results. While this involves ingesting data from the operating system, the handling is performed using standard engine constants and boolean checks that do not introduce prompt injection vulnerabilities.
Audit Metadata