godot-theme-easter
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides modular components for UI theming, 3D mesh overrides, and particle effects using standard Godot Engine APIs such as
Tween,GPUParticles3D, andThemeoverrides. - [SAFE]: External dependencies and references are limited to official Godot documentation and other skills authored by the same vendor ('thedivergentai'), which are considered trusted within this context.
- [SAFE]: The date-based activation logic in
easter_seasonal_activation_gate.gdis a functional requirement for seasonal themes. It uses the system clock to toggle cosmetic effects and does not gate any security-sensitive operations. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface in
easter_seasonal_activation_gate.gdby reading from a local configuration fileuser://settings.cfg. - Ingestion points: Reads the
disable_seasonal_themeskey from theaccessibilitysection of a local ConfigFile. - Boundary markers: None specific, but the code uses a structured parser (
ConfigFile.new()) rather than raw string interpolation. - Capability inventory: The script only toggles visibility and process modes of UI/VFX nodes based on the setting.
- Sanitization: The value is explicitly cast to a boolean, preventing arbitrary instruction injection through the settings file.
Audit Metadata