jahro-setup
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to install a Unity package from the official vendor repository at https://github.com/jahro-console/unity-package.git. This is a standard installation procedure for the product and involves the author's own infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill scans local project files to determine the current setup status.
- Ingestion points: Reads the project's manifest file (Packages/manifest.json) and C# source files to detect specific dependencies and attributes.
- Boundary markers: The skill uses targeted string matching (e.g., searching for 'io.jahro.console') rather than processing arbitrary text, which naturally limits injection risks.
- Capability inventory: Performs read-only operations on the local file system to identify project configuration.
- Sanitization: Not applicable as the logic relies on fixed identifier detection.
Audit Metadata