gamedev-godot
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary focus is providing educational content and architectural patterns for game development in Godot.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly identifies and warns against a known security vulnerability in Godot's resource loading system. It explicitly advises developers to avoid loading user-modified
.resor.tresfiles because they can execute arbitrary code during deserialization. This is documented inreferences/rendering-and-export.mdunder 'Save systems (and the .res security trap)'. - [EXTERNAL_DOWNLOADS]: References to external sources like
docs.godotengine.organdgodotengine.orgtarget official, well-known services for the technology described. These references are used for documentation and fact-checking purposes and do not involve remote code execution. - [COMMAND_EXECUTION]: The skill mentions command-line tools for CI/CD processes, such as
godot --headless --export-release. These are documented as standard practices for headless build environments and do not involve shell injection or privilege escalation. - [PROMPT_INJECTION]: No patterns were found that attempt to override AI safety guidelines or manipulate agent behavior.
Audit Metadata