godot-adapt-desktop-to-mobile
Fail
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The
scripts/offline_save_sync.gdfile contains a hardcoded encryption key used for securing game data on disk. This practice is insecure as the key is embedded directly in the source code, making it trivial to decrypt save files if the code or application is accessed. - Evidence: The script uses "secure_mobile_key_123!" as the password for
FileAccess.open_encrypted_with_passin both the_force_save_to_diskand_load_game_datafunctions.
Recommendations
- AI detected serious security threats
Audit Metadata