godot-prompter-using-godot-prompter

Warn

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: MEDIUMPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill uses authoritative and overriding language to control agent behavior, specifically mandating that the agent "MUST check for a matching godot-prompter skill and invoke it" and stating "This is not optional."
  • [EXTERNAL_DOWNLOADS]: The skill body and reference files provide instructions to download and install the GodotPrompter plugin suite from an external GitHub repository (https://github.com/jame581/GodotPrompter) via agy plugin install and git clone commands. This repository is not owned by the skill author (bgrenat) and is not a recognized trusted organization.
  • [COMMAND_EXECUTION]: The instructions include multiple shell snippets for both Unix-like systems and Windows to create directories and symbolic links (e.g., mkdir -p .agents, ln -s, New-Item -ItemType Junction).
  • [INDIRECT_PROMPT_INJECTION]: The skill serves as a workflow coordinator that triggers specialized sub-skills based on the project context it processes.
  • Ingestion points: Project file structure and contents analyzed during the "Implementation Phase" (SKILL.md).
  • Boundary markers: None identified; the skill relies on the agent to correctly map project systems to the domain skill table.
  • Capability inventory: Includes file system reading/writing and command execution through the various coordinated skills.
  • Sanitization: No evidence of sanitization or filtering for data ingested from the project environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 12, 2026, 08:02 PM