godot
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily composed of educational and reference material for the Godot 4 game engine. It provides detailed technical constraints (such as node lifetime and memory management) to help developers avoid common engine-specific bugs.
- [DATA_EXFILTRATION]: Analysis of the
ci-export.shexample script shows the use ofaws s3 sync. This is a standard and expected operation for a CI/CD deployment workflow and does not involve the exfiltration of sensitive local data or the use of hardcoded credentials. - [DYNAMIC_EXECUTION]: The documentation in
references/godot-resources.mdcorrectly warns about the security risks of usingResourceLoader.load()on untrusted.tresfiles (which can contain arbitrary scripts) and recommends using safe alternatives like JSON. This demonstrates a security-conscious approach to engine features. - [COMMAND_EXECUTION]: The skill describes various Godot CLI commands (e.g.,
--headless,--export-release). These are standard operations for building and testing Godot projects and do not present a security risk in the context provided. - [NO_CODE]: The skill does not include any scripts that execute automatically on the user's host machine. The provided scripts are examples for use within a Godot project environment.
Audit Metadata