unity-console

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it reads data from the Unity console which could originate from untrusted external sources or application state.
  • Ingestion points: The console_get_logs, console_get_stats, and console_export skills defined in SKILL.md ingest data directly from the Unity console buffer.
  • Boundary markers: The skill does not provide any boundary markers or specific instructions to the agent to isolate log content from its own execution logic.
  • Capability inventory: The skill provides a console_export capability in SKILL.md to write data to the local file system.
  • Sanitization: No sanitization, escaping, or validation of the log content is implemented before it is presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 07:10 AM