unity-addressables

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied asset paths and group names which creates an input surface for indirect injection. * Ingestion points: assetPath and groupName parameters in SKILL.md. * Boundary markers: Not specified. * Capability inventory: File system writes and blocking build operations. * Sanitization: Not specified.
  • [DYNAMIC_EXECUTION]: The implementation uses reflection to access the Unity.Addressables.Editor assembly at runtime. This dynamic loading technique is used for package decoupling.
  • [COMMAND_EXECUTION]: The addressables_build function triggers a long-running blocking operation on the Unity Editor main thread, which is an intended but significant execution event.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:52 AM