unity-hybridclr

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes assembly lists and configuration settings that influence code generation and the compilation pipeline.
  • Ingestion points: Data enters through hybridclr_settings_set parameters and local asmdef files in the Unity project as defined in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded in assembly names or configuration data.
  • Capability inventory: The skill can write to the project directory, trigger C# compilation via BuildPipeline, and execute code via reflection, which provides a significant execution surface for injected data.
  • Sanitization: The skill performs basic validation of assembly name stems and extensions but trusts the logical content of the provided configuration.
  • [COMMAND_EXECUTION]: Several skill operations trigger long-running, synchronous processes that block the Unity Editor main thread.
  • Evidence: hybridclr_compile_dlls and hybridclr_generate_all in SKILL.md are documented to block the Editor's main thread for several minutes, which could impact the responsiveness of the host environment.
  • [DYNAMIC_EXECUTION]: The module utilizes reflection to resolve and invoke methods within the HybridCLR.Editor assembly at runtime.
  • Evidence: The "Reflection Anchors" section in SKILL.md maps skill calls directly to internal classes such as Commands.PrebuildCommand.GenerateAll() and Commands.CompileDllCommand.CompileDll().
  • [DATA_EXFILTRATION]: The skill provides the ability to discover absolute internal file system paths of the development environment.
  • Evidence: hybridclr_get_paths in SKILL.md resolves and returns absolute forms for paths including HybridCLRDataDir, LocalUnityDataDir, and LocalIl2CppDir.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:52 AM