The Agent Skills Directory

[DYNAMIC_EXECUTION]: The file scripts/dynamic_script_attachment.gd implements a system for attaching scripts to nodes at runtime. By using load(script_path) and node.set_script(script), it enables the execution of arbitrary GDScript files from the filesystem. This pattern, intended for modding systems, poses a security risk if the script path is provided by an untrusted source or influenced by external data.
[DYNAMIC_EXECUTION]: In SKILL.md, the "Scene Patcher" pattern is documented using ProjectSettings.load_resource_pack(pck_path). This allows the mounting of external .pck files into the virtual filesystem, which can override existing game resources or introduce new executable content. This functionality is a common vector for remote code execution (RCE) if the resource pack is downloaded from an unverified or malicious location.

godot-scene-management