ludeo-unity-integration

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's instructions guide the agent to download the Ludeo Unity plugin from the official vendor repository on GitHub (github.com/ludeo-labs/unity-plugin-releases). This is a trusted source consistent with the skill's authorship.
  • [COMMAND_EXECUTION]: The workflow involves standard development commands such as git for branch management, gh for downloading releases, and the Unity Editor in -batchmode for headless compilation and smoke testing. It also uses the vendor's ludeo CLI for build management.
  • [DATA_EXF_RECOGNITION]: Phase 7 of the skill handles the upload of game builds to the Ludeo cloud. This process is secured with multiple checks, including a dry-run phase and a mandatory requirement for the agent to present the final command and wait for explicit human confirmation before proceeding.
  • [NO_MALICIOUS_PATTERNS]: Comprehensive scanning of the skill's 88 files found no evidence of prompt injection, code obfuscation (such as Base64 or zero-width characters), or unauthorized data access. The included maintenance scripts (scripts/validate-skill.mjs and scripts/generate-learnings-index.mjs) are benign tools for ensuring skill integrity.
  • [SAFE_MCP_USAGE]: The skill utilizes vendor-hosted MCP servers (ludeo-mcps-sdk-docs.ludeo.com and mcp-ludeo-context-internal.ludeo.com) to provide up-to-date documentation and context. These are verified vendor endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 07:54 PM
Security Audit — agent-trust-hub — ludeo-unity-integration