unity-hybridclr
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes assembly lists and configuration settings that influence code generation and the compilation pipeline.
- Ingestion points: Data enters through
hybridclr_settings_setparameters and localasmdeffiles in the Unity project as defined inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded in assembly names or configuration data.
- Capability inventory: The skill can write to the project directory, trigger C# compilation via
BuildPipeline, and execute code via reflection, which provides a significant execution surface for injected data. - Sanitization: The skill performs basic validation of assembly name stems and extensions but trusts the logical content of the provided configuration.
- [COMMAND_EXECUTION]: Several skill operations trigger long-running, synchronous processes that block the Unity Editor main thread.
- Evidence:
hybridclr_compile_dllsandhybridclr_generate_allinSKILL.mdare documented to block the Editor's main thread for several minutes, which could impact the responsiveness of the host environment. - [DYNAMIC_EXECUTION]: The module utilizes reflection to resolve and invoke methods within the
HybridCLR.Editorassembly at runtime. - Evidence: The "Reflection Anchors" section in
SKILL.mdmaps skill calls directly to internal classes such asCommands.PrebuildCommand.GenerateAll()andCommands.CompileDllCommand.CompileDll(). - [DATA_EXFILTRATION]: The skill provides the ability to discover absolute internal file system paths of the development environment.
- Evidence:
hybridclr_get_pathsinSKILL.mdresolves and returns absolute forms for paths includingHybridCLRDataDir,LocalUnityDataDir, andLocalIl2CppDir.
Audit Metadata