export-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Butler CLI utility from the official itch.io distribution infrastructure (broth.itch.ovh) to facilitate automated game deployment.
- [COMMAND_EXECUTION]: Utilizes standard build automation commands including the Godot engine CLI, git for version tracking, and sed for automated project file updates within GitHub Actions environments.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes data from
git describeto generate version strings inreferences/versioning.mdandreferences/ci-cd-github-actions.md. - Boundary markers: No explicit delimiters are used when injecting version strings into the project configuration.
- Capability inventory: The skill uses
OS.executeand file-writing capabilities (ProjectSettings.save,sed) to manage build metadata. - Sanitization: Implements basic output sanitization using
strip_edges()to clean externally sourced strings before use.
Audit Metadata