scenario-godot-rendering-lighting

SUSPICIOUS. The core Godot rendering capabilities are coherent and stay local, with no credential harvesting or exfiltration. The main issue is transitive trust: the skill tells the agent to install additional skills via an unpinned CLI path, which is broader than necessary for a lighting guide and raises supply-chain risk.