godot-game-dev
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses npx to run godot-cli for project scaffolding, editor management, and status verification.
- [EXTERNAL_DOWNLOADS]: Fetches the godot-cli package from the NPM registry and downloads Godot plugins and extensions from the ai-game.dev platform.
- [DYNAMIC_EXECUTION]: Supports the execution of C# code snippets directly in the Godot engine via the CLI's exec command for automated project edits.
- [INDIRECT_PROMPT_INJECTION]: Processes external project configuration files and remote API responses, creating an attack surface for indirect instructions. (1) Ingestion points: project.godot, .csproj, and API data. (2) Boundary markers: None. (3) Capability inventory: Shell execution (npx) and file system writing. (4) Sanitization: None specified.
Audit Metadata