godot-prompter-resource-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for loading and saving .tres and .res files. These files can serve as ingestion points for untrusted data if obtained from external sources. The skill author proactively mitigates this by documenting the risk and suggesting JSON as a safer alternative for user-controlled data.\n
- Ingestion points: SKILL.md and references/collections.md use load() and ResourceLoader.Load() to ingest resource files.\n
- Boundary markers: The instructions explicitly warn developers about the dangers of untrusted resource files.\n
- Capability inventory: references/saving-resources.md uses ResourceSaver.save() to write data to the filesystem.\n
- Sanitization: Documentation recommends validating file sources and using JSON for untrusted data to avoid code execution.\n- [DYNAMIC_EXECUTION]: The documentation discusses Godot's resource loading mechanism, which involves instantiating objects that can contain embedded GDScript. The skill provides clear security guidance, stating that resources should never be loaded from untrusted sources due to their ability to execute arbitrary code.
Audit Metadata