Depending on how the game was exported, Godot games can sometimes be considered a trojan due to its "Embed PCK" feature. Same issue reported on Godot's GitHub.
Unless the dev pays for a code signing certificate and signs every release, this'll happen at random. This trojan is a false positive.