unity-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
workflow_planskill allows for the execution of a combined plan of multiple other skills based on a provided JSON string. This provides a mechanism for dynamic orchestration of agent capabilities. - [COMMAND_EXECUTION]: The snapshot system is capable of restoring
.cs(C#) script files. While intended for undoing changes, this capability allows the skill to modify executable code within the development environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes task descriptions and batch plans that could be influenced by untrusted data if the agent is processing external content. This could lead to the execution of unintended tool chains or the poisoning of history logs.
- [SAFE]: The skill implementation includes several best-practice safety controls, such as categorizing risky operations as
SkillMode.Manualto require user intervention and marking data-clearing operations withRiskLevel="high".
Audit Metadata