godot-organize-assets
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes user-controlled project files to determine its organization logic.
- Ingestion points: The skill reads various asset files (including .png, .jpg, .wav, .ogg, .ttf, .glb, and .tres) and analyzes project scenes and scripts to preserve asset references.
- Boundary markers: No explicit delimiters or instructions to ignore embedded content within processed files (such as metadata or code comments) are specified in the instructions.
- Capability inventory: The skill has broad filesystem write ("*") and move permissions, and the ability to perform git commits.
- Sanitization: No sanitization or validation of the content within scenes or scripts is described before the information is used to drive the organization process.
Audit Metadata