godot-state-machine-advanced

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • PROMPT_INJECTION (SAFE): No instructions attempting to override agent behavior or bypass safety filters were found. The 'MANDATORY' and 'NEVER' sections are standard technical documentation for developers.
  • DATA_EXFILTRATION (SAFE): No sensitive file access, network operations, or hardcoded credentials detected. The code operates entirely within the context of a Godot scene tree.
  • REMOTE_CODE_EXECUTION (SAFE): No remote script downloads or package installations are present. The provided GDScript snippets do not use dangerous functions like eval().
  • OBFUSCATION (SAFE): The content is clear, readable, and lacks any encoded or hidden characters.
  • INDIRECT_PROMPT_INJECTION (SAFE): While the state machine processes string-based state names, it performs standard validation using has_node() and lacks any capabilities that could be exploited via malicious input.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:07 PM