A mod runs inside the game with the same access to your computer as the game itself. Its scripts can read and write files, connect to the internet and start other programs. A mod with a native library goes further: it replaces part of the game's own program with compiled code. No check can prove that a mod is safe. Install mods from authors you trust, and read what the checks found.

What the site checks

CheckWhat it does
Pack Reads the file list. Refuses files that aren't Godot packs, packs built by a Godot newer than the game's 4.6, packs with an encrypted file list, and programs with a pack built in.
Native library Checks that a .dll is a 64-bit Windows library that exports gdblocks_init, isn't the game's own file and isn't packed, and lists the Windows functions it imports that the game's own library doesn't. It can't read what the code does, so a moderator checks every new library.
Scripts Reads every script it can and lists the calls that reach outside the game. Notes the scripts it could not read.
Virus scan Sends each file to VirusTotal. The mod page links each report.
Review A moderator approves a new author's first mod, and every new native library, before anyone else can see it.

Scan badges

Mod cards and pages carry a badge for the virus scan of the current version's files. A pack and a native library are scanned separately, and the badge shows the worse result:

BadgeMeaning
Scanned No VirusTotal engine flagged the file.
Flagged At least one engine flagged it. A moderator checked the file before it went up. Read the safety notes on the mod page before you download.
Scanning The scan hasn't finished.
Not scanned The scan could not finish. The files were still checked.

Antivirus engines sometimes flag harmless files and miss harmful ones, so a badge only reports what the scan saw.

Risky calls

The script check lists these calls wherever a mod makes them:

CallWhat it allows
OS.execute, OS.create_process, OS.shell_open Starting other programs, or opening files and links in them
HTTPRequest, HTTPClient Talking to servers on the internet
FileAccess, DirAccess Reading, writing and deleting files
ProjectSettings.load_resource_pack Loading more packs while the game runs
ClassDB.instantiate Creating an object from a class name held in text, which hides what gets created

A risky call marks a place to look closer. A mod that saves its own settings needs FileAccess, and one that checks for updates needs HTTPRequest. Ask whether each call fits what the mod says it does.

The mod page also lists what the scan could not read: encrypted files, delta patches of existing files, and code built while the game runs. The scan can't tell you what those do.

Native libraries

A native library runs as part of the game itself, with no sandbox, from before the game's own scripts start.

CapabilityWhat it means
Network Talks to servers on the internet.
Starts programs Starts other programs, or opens files and links in them.
Other programs Reads or writes the memory of other running programs.
Registry Changes the Windows registry.
Services Creates or controls Windows services.
Privileges Asks Windows for more rights than the game has.
Input Watches the keyboard or the clipboard across Windows.
Credentials Reads saved passwords or protected data.
Encryption Encrypts data, which ransomware and droppers do too.
Debugger checks Checks for a debugger or analysis tools.

A library can find any Windows function while it runs, so an empty list proves nothing. A listed function marks a place to ask whether it fits what the mod says it does.

Report a problem

If a mod does something its page doesn't mention, breaks saves, or reuploads someone else's work, use Report on its page. Reports go to the moderators, who can hide a mod from the site.