godot-project-foundations

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's behavior is entirely consistent with its stated purpose of Godot project organization. No malicious patterns, prompt injections, or data exfiltration attempts were found.
  • [COMMAND_EXECUTION]: Several scripts (project_bootstrapper.gd, feature_scaffolder.gd, runtime_configurator.gd) perform file system operations such as creating directories and writing files. These operations are localized to the Godot project environment (res:// and user:// paths) and represent legitimate developer tools for scaffolding and settings persistence.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to official Godot documentation and other skills within the author's GitHub repository. These are documented for informational purposes and do not involve unauthorized remote code execution or package installations.
  • [DYNAMIC_EXECUTION]: The feature_scaffolder.gd script generates GDScript files from hardcoded templates. This is an intended functionality for project scaffolding. The async_resource_loader.gd uses standard Godot ResourceLoader APIs for background scene loading, which is a best practice for game development.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 09:23 AM