gdscript-advanced
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of technical documentation and code examples for GDScript development. No malicious patterns, obfuscation, or data exfiltration attempts were detected.
- [COMMAND_EXECUTION]: While the skill explains the use of dynamic dispatch mechanisms in Godot (such as
Object.call), it explicitly identifies the security risks associated with unvalidated input and provides comprehensive remediation strategies, such as the use of allowlists for allowed method names. - [INDIRECT_PROMPT_INJECTION]: The skill identifies potential attack surfaces where untrusted data (e.g., from save files or network mods) could influence execution and provides specific guidance on how to sanitize and validate this data using boundary markers and allowlists.
Audit Metadata