godot-master

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes scripts for project management and diagnostics that use system-level execution. For example, scripts/mcp_setup_mcp_diagnostic_tool.gd executes a PowerShell command to verify system execution policies, and scripts/export_builds_headless_build.sh automates build workflows using the Godot CLI.
  • [EXTERNAL_DOWNLOADS]: Setup documentation and configuration generators, such as scripts/mcp_setup_mcp_config_generator.gd, guide the user to install the Godot Model Context Protocol server via npx. This package is hosted on the official npm registry, which is a well-known service.
  • [SAFE]: The skill utilizes JavaScriptBridge.eval in scripts/platform_web_web_bridge_sync.gd for standard web interactions, such as persisting data to browser localStorage and integrating with analytics services.
  • [SAFE]: Game state persistence logic in scripts/roguelike_meta_progression_manager.gd uses Base64 encoding to deter casual tampering of save files, representing a routine practice in game development.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 04:15 PM
Security Audit — agent-trust-hub — godot-master