godot-state-machine-advanced
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
hsm_resource_state_loader.gdscript utilizes theset_script()method to dynamically assign scripts to nodes at runtime. While this is the intended functionality for data-driven AI state management in Godot, it represents a dynamic code loading surface where logic is determined by external resource files. - Evidence:
state_node.set_script(res.state_script)found inscripts/hsm_resource_state_loader.gd. - [INDIRECT_PROMPT_INJECTION]: The skill implements a data-driven loading system that processes Godot Resource files (
.tres) to define AI behavior, creating a potential surface for indirect injection if these resources are sourced from untrusted third parties. - Ingestion points: The
initialize_states()function inscripts/hsm_resource_state_loader.gdprocesses thestate_resourcesarray. - Boundary markers: No explicit delimiters or instructions to ignore embedded content were found in the processing logic.
- Capability inventory: The system has the capability to modify node behavior via
set_script()inscripts/hsm_resource_state_loader.gdand execute logic viaphysics_update()andhandle_input()across multiple scripts. - Sanitization: There is no evidence of script validation or integrity checking before the script is assigned to the node.
Audit Metadata