unity-development

SUSPICIOUS: the Unity guidance content is benign and well-aligned, but the built-in companion-skill discovery and install flow introduces unnecessary local enumeration and transitive remote skill installation outside the stated purpose. No direct credential theft or exfiltration is present, so this is not confirmed malware, but it carries medium security risk from transitive trust and supply-chain exposure.