unity-test

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill provides the ability to generate and compile new C# test scripts at runtime via test_create_editmode and test_create_playmode, which write source files to the project's asset folder and trigger a Unity Domain Reload for compilation.
  • [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by ingesting raw, potentially attacker-controlled output from test runs. Ingestion points: The test_get_result skill returns message, stackTrace, and output fields directly from the testing environment. Boundary markers: There are no instructions or delimiters provided to prevent the agent from following commands embedded in these output fields. Capability inventory: The skill possesses capabilities for file modification and code execution within the Unity environment. Sanitization: No validation or sanitization of the test output is performed.
  • [COMMAND_EXECUTION]: The skill invokes the Unity Test Runner to execute code via test_run and test_run_by_name. It also includes a test_smoke_skills tool that can trigger the execution of multiple other skills in sequence.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:52 AM