godot-genre-battle-royale

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation and source code reference external technical guides and supplementary modules located on the official Godot Engine documentation site and the developer's GitHub repository.
  • [DYNAMIC_EXECUTION]: Map streaming is handled via asynchronous resource loading, a standard engine feature used here to load pre-defined level sectors without impacting runtime performance.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for data ingestion through network RPCs and state buffers. However, the instructions provide strong security mitigations.
  • Ingestion points: Peer-supplied data in request_loot, talk_to_server, and push_state functions.
  • Boundary markers: Mandatory design patterns in SKILL.md requiring authoritative server validation for all client-initiated requests.
  • Capability inventory: The skill utilizes networking APIs and resource loading for game simulation.
  • Sanitization: The instructions include an explicit security warning against using unsafe deserialization methods like get_var(true) which could lead to remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 09:23 AM