godot-prompter-mobile-development

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard command-line instructions for mobile development, including keytool for generating Android keystores, adb logcat for viewing device logs, and ndk-stack for symbolicating native crash traces. These are routine tasks for mobile game development and maintenance.
  • [EXTERNAL_DOWNLOADS]: The documentation references official Godot native debug symbols and community-maintained plugin templates on GitHub. These links provide developers with access to legitimate tools and starting points for their own mobile extensions.
  • [DYNAMIC_EXECUTION]: The instructions cover the JavaClassWrapper API (introduced in Godot 4.4), which enables calling Android Java/Kotlin classes directly from scripts. The skill demonstrates safe and intended usage of this feature for basic platform tasks such as triggering vibration, showing UI toasts, and using the system printer.
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines how to process system events, such as application lifecycle notifications and permission results. While this involves ingesting data from the operating system, the handling is performed using standard engine constants and boolean checks that do not introduce prompt injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:04 PM