godot-editor
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of local command execution through the
justtask runner, the Godot engine CLI, and the GitHub CLI (gh). These tools are used for project management tasks such as code formatting, asset importing, running test suites, and managing releases. - [COMMAND_EXECUTION]: Provides a bridge to execute arbitrary commands within the Godot editor environment via the
just godot-cmdrecipe and several MCP tools. - [EXTERNAL_DOWNLOADS]: Includes functionality to download sound assets from Sonniss, a well-known service, and install project dependencies via the
just setupcommand. - [PROMPT_INJECTION]: An indirect prompt injection surface is present in the
/ci:fix-cicommand and associated workflows. - Ingestion points: The agent is instructed to read CI logs using
gh run viewand project documentation likeCI_LEARNINGS.mdto diagnose and fix failures. - Boundary markers: The instructions do not define boundary markers or provide explicit warnings to ignore instructions that might be embedded in the CI logs or external data.
- Capability inventory: The skill has broad capabilities including file-system modification, command execution via
justandgodot, and control over the Godot editor through an MCP bridge. - Sanitization: No sanitization or validation of the CI log content is specified before the agent processes it for decision-making.
Audit Metadata