godot-master

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Godot guidance is coherent and mostly benign, with official documentation links and no credential harvesting or exfiltration. The main issue is the undocumented dependency on an unspecified Godot MCP server: the skill instructs the agent to use external tooling capable of modifying scenes and running projects, but provides no verifiable source or release provenance for that toolchain.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 12, 2026, 07:39 PM
Package URL
pkg:socket/skills-sh/thedivergentai%2Fgd-agentic-skills%2Fgodot-master%2F@d2461216e78b5435c1ae4b677074ab4b2a0f7f4b
Security Audit — socket — godot-master