unity-test
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides the ability to generate and compile new C# test scripts at runtime via
test_create_editmodeandtest_create_playmode, which write source files to the project's asset folder and trigger a Unity Domain Reload for compilation. - [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by ingesting raw, potentially attacker-controlled output from test runs. Ingestion points: The
test_get_resultskill returnsmessage,stackTrace, andoutputfields directly from the testing environment. Boundary markers: There are no instructions or delimiters provided to prevent the agent from following commands embedded in these output fields. Capability inventory: The skill possesses capabilities for file modification and code execution within the Unity environment. Sanitization: No validation or sanitization of the test output is performed. - [COMMAND_EXECUTION]: The skill invokes the Unity Test Runner to execute code via
test_runandtest_run_by_name. It also includes atest_smoke_skillstool that can trigger the execution of multiple other skills in sequence.
Audit Metadata