Unity Refactor
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via
Bashto perform file system operations such asfind,wc, andsortfor analyzing codebase metrics like file size. - [PROMPT_INJECTION]: The skill processes external source code which could contain malicious instructions designed to manipulate the agent's behavior (Indirect Prompt Injection).
- Ingestion points: Project files located in
Assets/Scripts/are accessed viaReadandGreptools inSKILL.md. - Boundary markers: Content from the project files is analyzed without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The agent has access to
Edit,Write, andBashtools across its lifecycle. - Sanitization: The skill does not perform sanitization or validation of the code content read from the file system.
Audit Metadata