Unity Save System

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
references/save-templates.md

This is a Unity save/load implementation with no evident malware, network exfiltration, or credential theft. Unvalidated slot names can permit filesystem path traversal if callers supply attacker-controlled values, and TypeNameHandling.Auto makes tampered save files a deserialization risk whose impact depends on the runtime and available types. Severity is moderate; validate slot names and constrain resolved paths to the save directory, and avoid unsafe polymorphic deserialization of untrusted saves.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Oct 22, 2026, 02:17 AM
Package URL
pkg:socket/skills-sh/juliankerignard%2Funity-skills%2Funity-save-system%2F@f67ea60551989935119d3118bdc3668bea8e359cfb64f0a9745437a3bd400441