unity-camera

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions define standard Unity editor camera controls. No evidence of prompt injection, data exfiltration, or unauthorized command execution was found. All functions are scoped to camera management and scene visualization.- [PROMPT_INJECTION]: The skill interacts with the Unity environment by reading GameObject names and properties (e.g., via camera_list or camera_get_properties). This presents a standard surface for indirect prompt injection if the Unity scene itself contains malicious content, though the skill implementation itself is benign.
  • Ingestion points: Scene data such as camera names and hierarchy paths returned by camera_list and camera_get_properties in SKILL.md.
  • Boundary markers: No specific delimiters or instructions to ignore embedded content are provided.
  • Capability inventory: File system access for saving screenshots via camera_screenshot, and scene state modification via camera_set_properties.
  • Sanitization: No validation or sanitization of input strings (like name or savePath) is specified in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 07:10 AM
Security Audit — agent-trust-hub — unity-camera