unity-addressables
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages Unity Addressables assets and builds. All identified behaviors are consistent with its stated purpose of project automation.
- [DYNAMIC_EXECUTION]: The skill uses C# reflection to interact with the Unity.Addressables.Editor assembly. This is used for version decoupling and does not involve executing untrusted code or remote payloads.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided strings for asset paths and group names. While this is a potential attack surface, the inputs are used for standard Unity Editor operations (asset lookup, renaming) which are validated by the underlying Unity APIs.
- [COMMAND_EXECUTION]: The addressables_build skill executes a Unity build process. This is a long-running, blocking operation documented within the skill's limitations.
Audit Metadata