The Agent Skills Directory

[COMMAND_EXECUTION]: Widespread script injection vulnerability identified across multiple scripts, including add_node.py, load_sprite.py, create_scene.py, get_uid.py, config_compiler.py, and ui_assembler.py. The GodotBase.write_worker method in scripts/base.py facilitates the creation of temporary GDScript files using raw string interpolation of command-line arguments (e.g., node types, resource paths, and JSON layout data). These unsanitized inputs are embedded directly into the logic of generated scripts that are subsequently executed by the Godot CLI using the -s (script) flag. An attacker can exploit these points to execute arbitrary GDScript, which can perform dangerous system operations via Godot's OS.execute() or OS.shell_open() APIs.\n- [COMMAND_EXECUTION]: The scripts/stop_project.py script provides a mechanism for arbitrary process termination. It executes taskkill on Windows or os.kill on Unix-based systems using a user-supplied Process ID (PID). While functional for its stated purpose of stopping Godot instances, this capability can be abused to terminate arbitrary system processes if the agent is running with sufficient permissions and is provided with a target PID.

godot-builder