You mentioned Claude not being able to see the games. What I really like for this is the Claude Code Chrome Extension. You can easily make godot build a web version, and then have Claude debug it interactively in the browser.
Also, OpenAI has proposed ways of training LLMs to trust tool outputs less than User instructions (https://arxiv.org/pdf/2404.13208). That also doesn't work against these attacks.
You mentioned Claude not being able to see the games. What I really like for this is the Claude Code Chrome Extension. You can easily make godot build a web version, and then have Claude debug it interactively in the browser.