godot-tweening
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No override instructions, safety bypasses, or persona-switching attempts were found. The instructional content adheres to providing technical guidance for animation logic.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access, or network exfiltration patterns were identified. External links are limited to official Godot documentation and the author's own GitHub repositories.
- [OBFUSCATION]: The content is entirely in plain text with no use of Base64 encoding, zero-width characters, homoglyphs, or encoded strings within the scripts or documentation.
- [REMOTE_CODE_EXECUTION]: The skill does not perform remote script execution or package installations. All logic is contained within the provided GDScript files which use standard Godot Engine APIs.
- [DYNAMIC_EXECUTION]: Usage of
tween_methodand lambdas follows standard Godot practices for interpolation. No usage ofeval(),exec(), or runtime compilation from untrusted strings was found. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests node references and resources (like
Curve), these are used exclusively for property interpolation within the engine's animation system. There are no patterns involving the processing of untrusted natural language data that could influence agent behavior. - [PRIVILEGE_ESCALATION]: No commands for escalating privileges or modifying system-level configurations (e.g., sudo, chmod) are present.
- [PERSISTENCE]: The scripts do not attempt to establish persistence on the host system or modify shell configurations.
Audit Metadata