stream-unity
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Unity SDK packages (.unitypackage) and documentation from the official GetStream GitHub repositories and getstream.io. These resources are vendor-owned and necessary for the stated purpose of the skill.- [COMMAND_EXECUTION]: The skill uses bash commands to inspect local Unity project configurations and manage SDK dependencies via the GitHub CLI. These actions are standard for development tools and restricted to the project environment.- [CREDENTIALS_UNSAFE]: The skill includes explicit security warnings against hardcoding API secrets and tokens in client-side code, recommending the use of secure token providers and CLI-based authentication for development.- [PROMPT_INJECTION]: The skill's documentation of hidden Unity GameObjects (runners) was evaluated for concealment; however, this represents standard SDK architecture, and the skill provides a clear debug mechanism for users to inspect these objects.
Audit Metadata