unity-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The workflow_plan skill allows for the execution of a combined plan of multiple other skills based on a provided JSON string. This provides a mechanism for dynamic orchestration of agent capabilities.
  • [COMMAND_EXECUTION]: The snapshot system is capable of restoring .cs (C#) script files. While intended for undoing changes, this capability allows the skill to modify executable code within the development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes task descriptions and batch plans that could be influenced by untrusted data if the agent is processing external content. This could lead to the execution of unintended tool chains or the poisoning of history logs.
  • [SAFE]: The skill implementation includes several best-practice safety controls, such as categorizing risky operations as SkillMode.Manual to require user intervention and marking data-clearing operations with RiskLevel="high".
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:59 AM