playtest-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility scripts for game developers to track playtest metrics. The implementation uses standard Godot Engine classes and follows best practices for local data persistence.
- [DATA_EXFILTRATION]: Analysis of the provided GDScript classes (DeathHeatmap, GameAnalytics, ZoneTimer, ABTest) confirms that telemetry data is stored strictly in the application's local sandbox using the
user://protocol. No network operations (e.g., HTTPRequest or socket communication) are present to transmit this data externally. - [COMMAND_EXECUTION]: There are no instances of shell command execution, subprocess spawning, or interaction with the host operating system's command line.
- [REMOTE_CODE_EXECUTION]: The skill does not include any mechanisms for downloading external scripts or executing remote code. It relies entirely on static, local GDScript logic.
- [DYNAMIC_EXECUTION]: No dynamic code execution patterns, such as
eval(), runtime script compilation, or unsafe deserialization, were found. JSON parsing is handled using Godot's built-in safe parsing methods.
Audit Metadata