godot-resource-data-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional templates for Godot GDScript. All identified operations, such as resource saving, loading, and file system navigation, use standard Godot APIs (ResourceSaver, ResourceLoader, DirAccess) and target local project or user directories.
- [INDIRECT_PROMPT_INJECTION]: The templates describe methods for loading external data files (e.g., save games). While loading untrusted data is a potential attack vector in many systems, the skill demonstrates standard game engine practices for persistent data management.
- Ingestion points: Scripts like resource_save_system.gd and resource_validator.gd read files from user:// and res:// paths.
- Boundary markers: Not applicable for these architectural code templates.
- Capability inventory: File system access, file writing, and dynamic resource loading via load() and ResourceLoader.
- Sanitization: resource_validator.gd provides logic to check for missing properties in resource files to ensure data integrity.
- [METADATA_POISONING]: The skill documentation references a non-existent version of the Godot engine (4.7) and associated documentation links. These appear to be placeholders or factual inaccuracies rather than malicious instructions or attempts to subvert agent behavior.
Audit Metadata