unity-profiler
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is exclusively designed for capturing read-only performance snapshots from a Unity runtime environment.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for untrusted runtime data, but lacks exploitable capabilities.
- Ingestion points: Asset and object names (textures, meshes, materials, audio clips) are read from the Unity runtime via
profiler_get_runtime_memory,profiler_get_texture_memory, etc., in SKILL.md. - Boundary markers: None defined.
- Capability inventory: None. The skill does not have network access, file system write permissions, or command execution capabilities.
- Sanitization: None defined.
- Assessment: Although external names are processed, the lack of output capabilities (sinks) ensures that any embedded instructions in the ingested data cannot be acted upon maliciously.
Audit Metadata