export-pipeline

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Butler CLI utility from the official itch.io distribution infrastructure (broth.itch.ovh) to facilitate automated game deployment.
  • [COMMAND_EXECUTION]: Utilizes standard build automation commands including the Godot engine CLI, git for version tracking, and sed for automated project file updates within GitHub Actions environments.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Processes data from git describe to generate version strings in references/versioning.md and references/ci-cd-github-actions.md.
  • Boundary markers: No explicit delimiters are used when injecting version strings into the project configuration.
  • Capability inventory: The skill uses OS.execute and file-writing capabilities (ProjectSettings.save, sed) to manage build metadata.
  • Sanitization: Implements basic output sanitization using strip_edges() to clean externally sourced strings before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:09 AM