unity-build-pipeline
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code examples for Unity build automation. All provided C# and Bash scripts follow documented Unity Editor API practices for build reporting, platform switching, and CI execution.
- [INDIRECT_PROMPT_INJECTION]: The example CI script in
references/ci-build-script.mdingests command-line arguments viaEnvironment.GetCommandLineArgs(). These values (e.g., output path and version) are used to configure theBuildPlayerOptions. - Ingestion points: Command-line arguments in
references/ci-build-script.md(Environment.GetCommandLineArgs()). - Boundary markers: None (direct string extraction).
- Capability inventory: File system writes through
BuildPipeline.BuildPlayerand process termination viaEditorApplication.Exit. - Sanitization: Basic key-value parsing is implemented, but the values themselves are not sanitized. This is standard behavior for developer-oriented build tools and does not constitute a malicious pattern.
- [COMMAND_EXECUTION]: The skill documents standard Unity CLI arguments such as
-batchmode,-nographics, and mentions license activation flags (-username,-password). These are documented for legitimate automation use cases and do not represent a security vulnerability.
Audit Metadata