hz-unity-meta-core-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides templates and detailed instructions for using C# reflection (System.Reflection) to find types across loaded assemblies and invoke methods. It also provides patterns for accessing private or internal fields using RuntimeReflectionExtensions. This capability is used to interface with Meta SDK assemblies that are not directly referenceable in the Unity MCP environment.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes Unity project metadata, scene hierarchies, and package registries to identify configuration issues. This ingestion of external project data represents an indirect prompt injection surface. The documentation includes evidence chains for identifying SDK roots and accessing task registries, though it lacks explicit boundary markers for untrusted project content.
- [COMMAND_EXECUTION]: The skill automates the execution of vendor-provided maintenance tools. This includes invoking
OVRManifestPreprocessor.GenerateOrUpdateAndroidManifestto modify the project's Android manifest and using theOVRProjectSetupregistry to automatically apply configuration fixes across different build targets.
Audit Metadata