godot-theme-easter

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides modular components for UI theming, 3D mesh overrides, and particle effects using standard Godot Engine APIs such as Tween, GPUParticles3D, and Theme overrides.
  • [SAFE]: External dependencies and references are limited to official Godot documentation and other skills authored by the same vendor ('thedivergentai'), which are considered trusted within this context.
  • [SAFE]: The date-based activation logic in easter_seasonal_activation_gate.gd is a functional requirement for seasonal themes. It uses the system clock to toggle cosmetic effects and does not gate any security-sensitive operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface in easter_seasonal_activation_gate.gd by reading from a local configuration file user://settings.cfg.
  • Ingestion points: Reads the disable_seasonal_themes key from the accessibility section of a local ConfigFile.
  • Boundary markers: None specific, but the code uses a structured parser (ConfigFile.new()) rather than raw string interpolation.
  • Capability inventory: The script only toggles visibility and process modes of UI/VFX nodes based on the setting.
  • Sanitization: The value is explicitly cast to a boolean, preventing arbitrary instruction injection through the settings file.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 09:23 AM