unity-cli
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by instructing the AI agent to ingest data from an external executable's help output and use that data to construct subsequent commands.
- Ingestion points: The agent is instructed to run
unity <relevant-command> --helpand parse the resulting stdout to determine available syntax (referenced in SKILL.md). - Boundary markers: Present. The skill provides clear instructions to treat help output as authoritative but specifically mandates preflight checks and user authorization before any state-changing command is executed.
- Capability inventory: The agent is capable of executing arbitrary Unity CLI commands, including project creation, license activation, and build execution.
- Sanitization: Absent. The help output is not sanitized before being processed by the model.
- [EXTERNAL_DOWNLOADS]: Fetches the official Unity CLI installer from a well-known service domain.
- Source:
https://public-cdn.cloud.unity3d.com/hub/prod/cli/install.shandinstall.ps1(referenced in references/installation-and-upgrade.md). - [REMOTE_CODE_EXECUTION]: Provides instructions for the agent to install the Unity CLI by piping remote content directly into shell interpreters.
- Pattern:
curl -fsSL [URL] | bashandirm [URL] | iexfor the official Unity CLI installer.
Audit Metadata