godot-project-foundations
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's behavior is entirely consistent with its stated purpose of Godot project organization. No malicious patterns, prompt injections, or data exfiltration attempts were found.
- [COMMAND_EXECUTION]: Several scripts (
project_bootstrapper.gd,feature_scaffolder.gd,runtime_configurator.gd) perform file system operations such as creating directories and writing files. These operations are localized to the Godot project environment (res://anduser://paths) and represent legitimate developer tools for scaffolding and settings persistence. - [EXTERNAL_DOWNLOADS]: The skill contains references to official Godot documentation and other skills within the author's GitHub repository. These are documented for informational purposes and do not involve unauthorized remote code execution or package installations.
- [DYNAMIC_EXECUTION]: The
feature_scaffolder.gdscript generates GDScript files from hardcoded templates. This is an intended functionality for project scaffolding. Theasync_resource_loader.gduses standard GodotResourceLoaderAPIs for background scene loading, which is a best practice for game development.
Audit Metadata