godot-47-migration
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation and manual steps for project migration. No malicious code, obfuscation, or unauthorized data access patterns were detected. It references official Godot Engine resources which are trusted sources.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and modify Godot project files (GDScript and project.godot), which introduces an ingestion surface for untrusted data. This surface is necessary for its primary purpose as a migration tool.
- Ingestion points: The skill instructions suggest reading and modifying project files (SKILL.md).
- Boundary markers: The instructions explicitly prompt the user to review migration warnings in the output panel and test the project on all platforms.
- Capability inventory: The skill requests read, write, and bash permissions to facilitate the migration process (agents/claude-code.yaml).
- Sanitization: Relies on human-in-the-loop verification and automated editor migration warnings.
Audit Metadata