godot-project-foundations
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were detected. The instructions follow standard project management patterns.
- [DATA_EXFILTRATION]: The skill does not perform network operations, access sensitive file paths (like .ssh or .aws), or contain hardcoded credentials.
- [REMOTE_CODE_EXECUTION]: No remote script downloads or piped execution patterns (e.g., curl|bash) were found.
- [COMMAND_EXECUTION]: The skill references local GDScript files (e.g., project_bootstrapper.gd) located within the skill's scripts directory for project scaffolding. This is legitimate functionality for a Godot development skill.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for organizing project files. 1. Ingestion points: Local project file system and folder names (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Script-based directory creation and file validation. 4. Sanitization: Absent. The interaction with project data is limited to structural organization and follows standard development practices.
Audit Metadata