ludeo-unity-integration
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's instructions guide the agent to download the Ludeo Unity plugin from the official vendor repository on GitHub (
github.com/ludeo-labs/unity-plugin-releases). This is a trusted source consistent with the skill's authorship. - [COMMAND_EXECUTION]: The workflow involves standard development commands such as
gitfor branch management,ghfor downloading releases, and the Unity Editor in-batchmodefor headless compilation and smoke testing. It also uses the vendor'sludeoCLI for build management. - [DATA_EXF_RECOGNITION]: Phase 7 of the skill handles the upload of game builds to the Ludeo cloud. This process is secured with multiple checks, including a dry-run phase and a mandatory requirement for the agent to present the final command and wait for explicit human confirmation before proceeding.
- [NO_MALICIOUS_PATTERNS]: Comprehensive scanning of the skill's 88 files found no evidence of prompt injection, code obfuscation (such as Base64 or zero-width characters), or unauthorized data access. The included maintenance scripts (
scripts/validate-skill.mjsandscripts/generate-learnings-index.mjs) are benign tools for ensuring skill integrity. - [SAFE_MCP_USAGE]: The skill utilizes vendor-hosted MCP servers (
ludeo-mcps-sdk-docs.ludeo.comandmcp-ludeo-context-internal.ludeo.com) to provide up-to-date documentation and context. These are verified vendor endpoints.
Audit Metadata