unity-gameobject-edit
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to invokeunity-clifor operations such as renaming GameObjects, modifying component properties, and deleting objects from the Unity hierarchy. - [DYNAMIC_EXECUTION]: The
references/runtime-checklist.mdfile instructs the agent to usecargo runas a fallback method to execute theunity-clitool if the binary is not found on the systemPATH. This involves runtime compilation and execution of the source code present in the workspace. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from Unity scenes (GameObjects, Tags, Layers, and Components), which represents an external input surface.
- Ingestion points: Accessing and modifying Unity scene hierarchies and component fields using
unity-cli(referenced inSKILL.md). - Boundary markers: No specific boundary markers or "ignore instructions" delimiters are implemented when processing scene data.
- Capability inventory: The skill has access to command execution via
Bash(including tool invocation andcargo run) and file system access throughRead,Grep, andGlob(defined in theallowed-toolssection ofSKILL.md). - Sanitization: The instructions do not define sanitization or validation logic for the data retrieved from Unity scenes before it is processed by the agent.
Audit Metadata