godot-scene-management
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/dynamic_script_attachment.gdimplements a runtime script attachment mechanism usingnode.set_script(load(script_path)). Additionally,references/scene-patterns-deep.mddocuments the use ofProjectSettings.load_resource_pack(pck_path)for mounting external resource packs. These patterns allow for the execution of code from computed or external paths, which is a standard requirement for modding but constitutes dynamic loading. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface where untrusted data could influence agent actions.
- Ingestion points: Methods such as
apply_script_to_node(node, script_path)inscripts/dynamic_script_attachment.gd,load_scene(path)inscripts/async_scene_manager.gd, andopen_menu(path)inscripts/additive_ui_layering.gdaccept path strings that are processed by the agent. - Boundary markers: None identified; there are no explicit delimiters or instructions to ignore embedded content in loaded resources.
- Capability inventory: The skill uses
load().instantiate()andnode.set_script(), which can trigger the execution of logic attached to Godot scenes or script resources. - Sanitization: The provided scripts do not implement validation or sanitization for the
pathorscript_patharguments before passing them to theload()function.
Audit Metadata