godot-state-machine-advanced

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The hsm_resource_state_loader.gd script utilizes set_script() to dynamically initialize logic on nodes at runtime. This behavior is driven by local Godot Resource files (.tres) and is a standard architectural pattern for modular game AI.
  • [INDIRECT_PROMPT_INJECTION]: The skill features a data ingestion surface through its resource-driven state loader.
  • Ingestion points: The state_resources array in hsm_resource_state_loader.gd which reads from externalized state definitions.
  • Boundary markers: Not applicable as the skill uses structured engine-level resources rather than natural language data.
  • Capability inventory: Capabilities are restricted to standard SceneTree manipulation and child node initialization.
  • Sanitization: The skill relies on the Godot engine's native Resource loader to validate file types and integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:12 PM