godot-shaders

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill utilizes Godot's RenderingDevice API to perform runtime compilation of GLSL compute shaders in shader_tools.gd and compute_texture.gd. This functionality is used to verify parity between CPU and GPU calculations and to test texture generation on the main rendering thread.
  • [COMMAND_EXECUTION]: The gd_shaders.py utility invokes the Godot engine binary via the gd_run module to execute headless compilation tasks and windowed drawing checks, facilitating cross-renderer validation (Forward+, Mobile, Compatibility).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes .gdshader and .gdshaderinc files, which represent an ingestion point for untrusted data. While the lint function in gd_shaders.py provides static validation of shader code, the skill lacks explicit boundary markers to prevent the agent from obeying natural language instructions potentially embedded in comments or strings within these files. The skill has the capability to write scenes and modify the project.godot configuration file.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 01:44 AM