godot-resource-data-patterns

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The resource_validator.gd script identifies and loads all resource files within the project directory to perform structural validation.
  • Ingestion points: resource_validator.gd (line 47) utilizes load() to process every .tres and .res file found in the res:// directory.
  • Boundary markers: None; the script relies on file extensions to identify targets.
  • Capability inventory: Filesystem traversal via DirAccess and resource instantiation via ResourceLoader.
  • Sanitization: None; the script operates under the assumption that project-local resources are safe to load.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 08:42 PM