Unity Build & CI/CD Configurator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes instructions to manage sensitive information securely by using CI/CD secrets (e.g., UNITY_LICENSE) and environment variables instead of hardcoding credentials in build scripts or workflows. It also provides a comprehensive .gitignore to prevent the accidental commitment of sensitive files like keystores.
- [EXTERNAL_DOWNLOADS]: The CI/CD templates reference trusted external resources, including official GitHub Actions (actions/checkout, actions/cache) and the reputable game-ci community project for Unity automation. These references are standard, non-malicious, and originate from established sources.
- [COMMAND_EXECUTION]: The skill generates C# editor scripts (BuildAutomation.cs) that utilize the official UnityEditor.BuildPipeline API for automated builds. These operations are confined to the intended project build process and do not include arbitrary or dangerous shell command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it scans project files to configure build settings. However, the risk is negligible as it only extracts structural project data for template interpolation.
- Ingestion points: Project metadata from Assets/**/.unity, ProjectSettings/, and Packages/manifest.json.
- Boundary markers: Absent; the skill uses direct string interpolation to populate templates.
- Capability inventory: The generated scripts are capable of file system operations via BuildPipeline.BuildPlayer and Directory.CreateDirectory for build output.
- Sanitization: Absent; the skill assumes the integrity of the local project files it scans.
Audit Metadata