godot-master
Warn
Audited by Socket on Jun 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Godot guidance is coherent and mostly benign, with official documentation links and no credential harvesting or exfiltration. The main issue is the undocumented dependency on an unspecified Godot MCP server: the skill instructs the agent to use external tooling capable of modifying scenes and running projects, but provides no verifiable source or release provenance for that toolchain.
Confidence: 100%Severity: 60%
Audit Metadata