unity-multiplayer-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates a Lobby Management system that processes data from external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: The
LobbyManagerclass inSKILL.mdingests untrusted metadata (such as lobby names and map names) via theLobbyService.Instance.QueryLobbiesAsyncmethod. - Boundary markers: The implementation lacks explicit boundary markers or instructions to ignore embedded commands within the retrieved lobby data.
- Capability inventory: The skill includes network operation capabilities via Unity Gaming Services (Relay and Lobby APIs) and player state management functions.
- Sanitization: There is no evidence of string sanitization or validation for the metadata retrieved from the Unity Lobby service before it is presented or used.
Audit Metadata