godot-genre-battle-royale
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and source code reference external technical guides and supplementary modules located on the official Godot Engine documentation site and the developer's GitHub repository.
- [DYNAMIC_EXECUTION]: Map streaming is handled via asynchronous resource loading, a standard engine feature used here to load pre-defined level sectors without impacting runtime performance.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for data ingestion through network RPCs and state buffers. However, the instructions provide strong security mitigations.
- Ingestion points: Peer-supplied data in
request_loot,talk_to_server, andpush_statefunctions. - Boundary markers: Mandatory design patterns in SKILL.md requiring authoritative server validation for all client-initiated requests.
- Capability inventory: The skill utilizes networking APIs and resource loading for game simulation.
- Sanitization: The instructions include an explicit security warning against using unsafe deserialization methods like
get_var(true)which could lead to remote code execution.
Audit Metadata