unity-build-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The build automation script in
references/ci-build-script.mdprocesses untrusted data from the environment which can influence script behavior. - Ingestion points: The script reads external command-line arguments via
Environment.GetCommandLineArgs()to determine build targets and output paths. - Boundary markers: No explicit delimiters or instructions are implemented to separate external inputs from the script's logic or to ignore embedded commands.
- Capability inventory: The skill can trigger file system writes and binary builds through the
BuildPipeline.BuildPlayerAPI. - Sanitization: While the build target is validated against an allowed list, parameters such as the version string and output path are applied directly from the input arguments without validation or escaping.
Audit Metadata