scenario-godot-rendering-lighting
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests Godot scene files (
.tscn) and project configuration files (project.godot), which contain user-controlled identifiers such as node names and property values. These identifiers are extracted and interpolated into audit reports and logs used by the agent for decision-making. - Ingestion points:
light_audit.gdandgi_bake.gdload and process external scene files to identify rendering components. - Boundary markers: The skill does not implement specific delimiters or instructions to the LLM to ignore potentially malicious instructions embedded in node names or property strings.
- Capability inventory: The skill possesses significant capabilities, including local file writes (saving scenes), image capture, and the execution of Godot scripts via the
gd_runtoolkit. - Sanitization: No filtering or sanitization is performed on scene-extracted strings before they are presented to the agent's context.
- [COMMAND_EXECUTION]: The skill automates complex editor workflows by executing Godot scripts and manipulating the Godot
EditorInterface. This includes programmatic interaction with the editor UI to trigger lightmap baking and capturing high-resolution renders for analysis. - [DYNAMIC_EXECUTION]: The
post_effect.gdscript dynamically loads and compiles GLSL compute shaders at runtime using the Godot RenderingDevice API. This is a legitimate architectural requirement for implementing the skill's custom post-processing effects.
Audit Metadata