unity-cli

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Unity Editor logs, .NET build errors, and test results. It addresses this risk with explicit instructions to the agent to treat this content as data rather than instructions and to ignore any directives found within, particularly when reading compiler errors or logs as specified in the recovery playbooks.
  • [COMMAND_EXECUTION]: The skill makes extensive use of subprocesses to interact with the system's git, dotnet, and unity binaries. This behavior is fundamental to its role as a command-line interface wrapper for local development and build automation tools.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the Unity CLI installer from the official Unity CDN and fetching configuration files from well-known sources like GitHub's public repositories, following safe practices by inspecting downloads before execution.
  • [PERSISTENCE]: The vcs hooks install command allows the agent to install Git hooks into the local repository. This is a documented mechanism to ensure Unity integrity checks run at commit time and is intended for repository hygiene.
  • [DYNAMIC_EXECUTION]: The skill provides tools for evaluating C# code within a running Unity Editor instance and executing commands through a built-in MCP server, which are core features designed for Editor automation and AI-assisted workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 03:40 AM