godot-shaders
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes Godot's RenderingDevice API to perform runtime compilation of GLSL compute shaders in
shader_tools.gdandcompute_texture.gd. This functionality is used to verify parity between CPU and GPU calculations and to test texture generation on the main rendering thread. - [COMMAND_EXECUTION]: The
gd_shaders.pyutility invokes the Godot engine binary via thegd_runmodule to execute headless compilation tasks and windowed drawing checks, facilitating cross-renderer validation (Forward+, Mobile, Compatibility). - [INDIRECT_PROMPT_INJECTION]: The skill processes
.gdshaderand.gdshaderincfiles, which represent an ingestion point for untrusted data. While thelintfunction ingd_shaders.pyprovides static validation of shader code, the skill lacks explicit boundary markers to prevent the agent from obeying natural language instructions potentially embedded in comments or strings within these files. The skill has the capability to write scenes and modify theproject.godotconfiguration file.
Audit Metadata