Unity Save System
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
AnomalyAnomalyreferences/save-templates.md
LOWAnomalyLOW
references/save-templates.md
This is a Unity save/load implementation with no evident malware, network exfiltration, or credential theft. Unvalidated slot names can permit filesystem path traversal if callers supply attacker-controlled values, and TypeNameHandling.Auto makes tampered save files a deserialization risk whose impact depends on the runtime and available types. Severity is moderate; validate slot names and constrain resolved paths to the save directory, and avoid unsafe polymorphic deserialization of untrusted saves.
Confidence: 97%Severity: 55%
Audit Metadata