bevy-save-load
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural guidance and code snippets for game state persistence in the Bevy engine. It promotes secure design patterns such as stable IDs, versioned data transfer objects (DTOs), and atomic write operations to ensure data integrity.
- [SAFE]: External links point to official Bevy documentation on
docs.rsand the engine's public GitHub repository. These are well-known and reputable resources for the technology discussed. - [SAFE]: The instructions explicitly address security risks associated with loading data from untrusted sources (such as imported files or browser storage), recommending mitigations like validation of collection lengths, checksums, and strictly limiting resource allocation to prevent decompression bombs or memory exhaustion.
- [SAFE]: No patterns of prompt injection, data exfiltration, obfuscation, or unauthorized command execution were identified in the instructions or code samples. The skill adheres to the principle of least privilege by recommending filtered reflection via
DynamicWorldBuilderallowlists.
Audit Metadata