gamedev-godot

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary focus is providing educational content and architectural patterns for game development in Godot.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly identifies and warns against a known security vulnerability in Godot's resource loading system. It explicitly advises developers to avoid loading user-modified .res or .tres files because they can execute arbitrary code during deserialization. This is documented in references/rendering-and-export.md under 'Save systems (and the .res security trap)'.
  • [EXTERNAL_DOWNLOADS]: References to external sources like docs.godotengine.org and godotengine.org target official, well-known services for the technology described. These references are used for documentation and fact-checking purposes and do not involve remote code execution.
  • [COMMAND_EXECUTION]: The skill mentions command-line tools for CI/CD processes, such as godot --headless --export-release. These are documented as standard practices for headless build environments and do not involve shell injection or privilege escalation.
  • [PROMPT_INJECTION]: No patterns were found that attempt to override AI safety guidelines or manipulate agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 09:09 PM
Security Audit — agent-trust-hub — gamedev-godot