unity-editor-toolkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Unity Editor Toolkit’s database sync workflow loads and deserializes command payloads from the project’s SQLite file into runtime Command objects via DatabaseManager → CommandHistory.LoadHistoryFromDatabaseAsync() → CommandFactory.CreateFromDatabase(...), so outsider-written text can reach the LLM only if it is attacker-controlled content stored in that DB.