skills/lynricsy/hyperskills/godot/Gen Agent Trust Hub

godot

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily composed of educational and reference material for the Godot 4 game engine. It provides detailed technical constraints (such as node lifetime and memory management) to help developers avoid common engine-specific bugs.
  • [DATA_EXFILTRATION]: Analysis of the ci-export.sh example script shows the use of aws s3 sync. This is a standard and expected operation for a CI/CD deployment workflow and does not involve the exfiltration of sensitive local data or the use of hardcoded credentials.
  • [DYNAMIC_EXECUTION]: The documentation in references/godot-resources.md correctly warns about the security risks of using ResourceLoader.load() on untrusted .tres files (which can contain arbitrary scripts) and recommends using safe alternatives like JSON. This demonstrates a security-conscious approach to engine features.
  • [COMMAND_EXECUTION]: The skill describes various Godot CLI commands (e.g., --headless, --export-release). These are standard operations for building and testing Godot projects and do not present a security risk in the context provided.
  • [NO_CODE]: The skill does not include any scripts that execute automatically on the user's host machine. The provided scripts are examples for use within a Godot project environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 03:13 PM
Security Audit — agent-trust-hub — godot