game-dev-rust-godot
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a necessary JavaScript bundle (mq_js_bundle.js) from the official Macroquad GitHub repository to enable Rust-based game execution in browsers. This is a standard and safe dependency retrieval for the framework used.- [COMMAND_EXECUTION]: Utilizes various shell commands for project orchestration, including cargo for Rust compilation, godot4 for engine exports, playwright for testing, and scp for deploying artifacts to a remote server. These operations are consistent with the stated purpose of game development.- [PROMPT_INJECTION]: The skill ingests untrusted data from game specifications and assets while possessing the capability to execute shell commands and network operations, creating an indirect injection surface.
- Ingestion points: Reads project specifications from specs/games//test-cases.md and assets from local or network storage.
- Boundary markers: None identified in the prompt templates.
- Capability inventory: Executes cargo, godot4, playwright, scp, and python3 via shell.
- Sanitization: No explicit sanitization or validation of input file contents before execution of build and test commands.
Audit Metadata