setup-engine
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to download and install the official Unity CLI tool if it is missing from the environment, enabling project auditing and status checks.
- [COMMAND_EXECUTION]: The skill invokes the Unity CLI (e.g., 'unity status --json') to verify the project version and status as part of the setup workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files (e.g., ProjectVersion.txt, manifest.json) and external sources via WebSearch/WebFetch to populate engine reference docs. Ingestion points: Local configuration files and external web content. Boundary markers: No specific delimiters or safety warnings for processing untrusted content were identified in the instructions. Capability inventory: Access to file modification tools (Write, Edit) and shell execution (unity-cli). Sanitization: The instructions do not specify any sanitization or validation logic for data ingested from local or remote sources.
Audit Metadata