ludeo-unity-integration
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download the Ludeo Unity plugin from the author's official GitHub repository. This is a trusted vendor resource. Evidence: references/1-build-game-with-sdk.md directs the agent to run gh release download --repo ludeo-labs/unity-plugin-releases.
- [COMMAND_EXECUTION]: The workflow involves using the GitHub CLI for asset retrieval and executing the Unity Editor in batch mode to perform headless compilation and smoke tests. Evidence: references/1-build-game-with-sdk.md (gh) and references/3e-compile-and-fix.md (Unity -batchmode).
- [INDIRECT_PROMPT_INJECTION]: By design, the skill analyzes untrusted Unity project files, including C# scripts, scene YAML, and prefabs, which creates a surface for indirect prompt injection. Malicious content within the analyzed codebase could attempt to influence the agent's plan generation or implementation tasks. Ingestion points: references/2-map-game-code.md (systematic codebase scanning). Boundary markers: Absent. Capability inventory: multi-agent orchestration via the Agent tool, file system modification, and CLI tool execution. Sanitization: Absent for ingested source code.
Audit Metadata