unity-scene-inspect
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation in
references/runtime-checklist.mdrecommends usingcargo runas a fallback mechanism for executing theunity-clitool if it is not globally installed. This involves running code from the local workspace environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Unity scenes (such as GameObject names and component values), which serves as an ingestion point for external content. Ingestion points: Scene data retrieved through
unity-clihierarchy and component commands. Boundary markers: The instructions do not define specific delimiters to isolate external scene data. Capability inventory: The agent has access toBash(restricted tounity-cli),Read,Grep, andGlobtools. Sanitization: No data validation or sanitization requirements are mentioned for the ingested scene data.
Audit Metadata