Defold Game Engine

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a coherent Defold game-development reference skill, with only minor supply-chain caution around optional third-party dependency URLs and an unreviewed helper script listed in the manifest.

This skill looks safe as a Defold reference. Before using optional dependencies or running any included helper script, verify the GitHub libraries and inspect the script source yourself.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user installs these optional libraries into a Defold project, they are trusting external code maintained outside this skill.

Why it was flagged

The skill recommends third-party GitHub ZIP dependencies. They are purpose-aligned and mostly versioned, but users should still verify external dependencies before adding them to a game project.

Skill content
https://github.com/Insality/druid/archive/refs/tags/1.2.2.zip
https://github.com/subsoap/defsave/archive/refs/tags/v1.2.6.zip
https://github.com/insality/defold-monarch/archive/1.0.zip
Recommendation

Review the linked repositories and versions before adding them to a project, and prefer pinned releases or checksums where available.

What this means

The reviewed artifacts do not show unsafe behavior, but the helper script cannot be fully assessed from the provided content.

Why it was flagged

The manifest lists a Python helper script, but the supplied file contents were truncated and did not include its source. No install spec or SKILL.md instruction shows it being automatically executed.

Skill content
scripts/add_dependencies.py (2805 bytes)
Recommendation

Before running any helper script from the skill package, inspect its source and confirm it only performs expected Defold dependency setup.