unity-ads

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill restricts all network communication to official Unity Ads domains (services.api.unity.com and monetization.api.unity.com) using HTTPS, preventing unauthorized data exfiltration to third-party hosts.- [SAFE]: A custom redirect handler (SafeRedirectHandler) is implemented to ensure that sensitive Authorization headers are automatically stripped if an API request is redirected to a different origin, such as a cloud storage provider.- [SAFE]: Secret management follows industry best practices by requiring owner-only file permissions (0400 or 0600) and providing redaction logic to prevent credentials from appearing in error logs or agent outputs.- [SAFE]: Every mutation (POST, PUT, PATCH, DELETE) requires a multi-step safety workflow including a pre-flight preview of the changes, explicit user confirmation, and a post-flight verification GET request to ensure the remote state matches the requested state.- [SAFE]: The underlying Python script includes rigorous path validation to prevent directory traversal or the injection of absolute URLs into API calls.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 08:25 AM
Security Audit — agent-trust-hub — unity-ads