godot-animation-studio
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill's behavior and provided GDScript code are appropriate for its role as a resource management utility for the Godot Engine.
- [INDIRECT_PROMPT_INJECTION]: The skill's asset processing logic represents an attack surface for indirect prompt injection via untrusted files. Ingestion points: The
process_sprite_sheetsfunction inSKILL.mdreads files from a user-provided directory path. Boundary markers: The skill does not define specific delimiters or instructions to the agent to ignore potentially malicious content within processed assets. Capability inventory: The skill utilizesDirAccessfor directory traversal,load()for asset ingestion, andResourceSaver.save()for writing resource files inSKILL.md. Sanitization: The provided GDScript examples do not implement explicit validation for input paths or filenames.
Audit Metadata