godot-gdscript-mastery
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The instructions contain standard coding guidelines and best practices. There are no attempts to override agent safety filters, bypass system prompts, or induce restricted behaviors.
- [DATA_EXFILTRATION]: No network operations, hardcoded credentials, or sensitive file access patterns were identified. The skill focuses entirely on Godot-specific coding standards.
- [OBFUSCATION]: The content is clear and uses standard Markdown and GDScript formatting. No base64 encoding, zero-width characters, homoglyphs, or other obfuscation techniques were found.
- [REMOTE_CODE_EXECUTION]: The skill references local scripts (e.g.,
scripts/type_checker.gd) and internal documentation, which is standard for AI agent skills. There are no downloads from external or untrusted sources. - [COMMAND_EXECUTION]: No shell commands or subprocess execution patterns are present. The GDScript snippets provided are for instructional purposes within the Godot environment.
- [CREDENTIALS_UNSAFE]: No API keys, tokens, or private secrets are hardcoded in the skill.
- [INDIRECT_PROMPT_INJECTION]: While the skill is intended for code review (which involves processing external code), it does not define any exploitable capabilities like network access or file writes that could be triggered by malicious code inputs. It functions as a set of static guidelines.
- [PERSISTENCE]: The skill does not attempt to modify shell profiles, system services, or registry keys to maintain access.
Audit Metadata