setup-engine

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is designed to download and install the official Unity CLI tool if it is missing from the environment, enabling project auditing and status checks.
  • [COMMAND_EXECUTION]: The skill invokes the Unity CLI (e.g., 'unity status --json') to verify the project version and status as part of the setup workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files (e.g., ProjectVersion.txt, manifest.json) and external sources via WebSearch/WebFetch to populate engine reference docs. Ingestion points: Local configuration files and external web content. Boundary markers: No specific delimiters or safety warnings for processing untrusted content were identified in the instructions. Capability inventory: Access to file modification tools (Write, Edit) and shell execution (unity-cli). Sanitization: The instructions do not specify any sanitization or validation logic for data ingested from local or remote sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 02:47 PM