unity-csharp-scripting
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate Unity development instructions and a local utility script for project maintenance. No malicious patterns, obfuscation, or unauthorized data access were found.
- [COMMAND_EXECUTION]: The skill includes a Python script (scripts/check_unity_project.py) to validate Unity project structure. The script is designed for local execution, uses only Python's standard library, and performs read-only operations on specific Unity project file types.
- [INDIRECT_PROMPT_INJECTION]: The project linting script represents a potential surface for indirect prompt injection. 1. Ingestion points: The script reads .meta, .cs, .unity, .prefab, .asset, and other project files (scripts/check_unity_project.py). 2. Boundary markers: Absent in skill instructions for processing script output. 3. Capability inventory: Writing and editing Unity C# scripts. 4. Sanitization: The script utilizes json.dumps() for machine-readable output, providing some structure.
Audit Metadata