unity-to-tasks
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to organize project tasks and write documentation files to the local directory. It operates within the bounds of a documentation and project management tool.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external specifications and conversation context. While this creates a potential surface for indirect prompt injection if the ingested files contain malicious instructions, the skill's capabilities are limited to reading and writing documentation.
- Ingestion points: Reads user-provided specification files and conversation history as described in Step 1 of the Process section in SKILL.md.
- Boundary markers: None explicitly defined to separate ingested content from the agent's core instructions.
- Capability inventory: File read access to the codebase and file write access to the
docs/directory. - Sanitization: No specific sanitization or filtering of ingested content is implemented.
Audit Metadata