scenario-godot-pipeline-automation

SUSPICIOUS: the core Godot automation behavior is largely coherent and proportionate, with mostly legitimate developer-tooling actions. Risk is raised by transitive skill installation, optional execution of a third-party MCP server, and third-party tool fetching/execution, but there is no clear credential theft, covert exfiltration, or purpose-incompatible behavior.