The Agent Skills Directory

[DYNAMIC_EXECUTION]: The binary save system pattern uses save_file.get_var(true), which allows for full object serialization. While standard in Godot development, this can be risky if the local save files are tampered with, as it allows for object instantiation.
[DYNAMIC_EXECUTION]: The guide mentions loading resource paths from save data using the load() function. In Godot, load() can execute scripts if the provided path is pointed to a .gd file, which is a potential risk if the save file content is not restricted to known asset directories.
[DATA_INGESTION]: The skill provides patterns for ingesting data from the local file system using the user:// protocol. It includes defensive programming practices such as using JSON.parse() to check for valid formatting and data.get() to prevent crashes from missing fields in the loaded dictionary.

godot-save-load-systems