hz-unity-project-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external project files which presents a surface for indirect prompt injection if those files contain adversarial content.
- Ingestion points: The skill reads project documentation (
README.md,CHANGELOG.md), package manifests (manifest.json), and script contents to build its knowledge base (SKILL.md, Mode 1). - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the scanned project files.
- Capability inventory: The skill is restricted to file system read and write operations within the project directory to generate markdown files; it lacks network access or code execution capabilities.
- Sanitization: The skill does not perform specific sanitization of the content extracted from project files before documenting it.
- [SAFE]: The skill's primary operations—listing files, reading configuration, and writing markdown documentation—are consistent with its stated purpose of project analysis. It does not access sensitive system paths (like SSH keys or environment variables) and contains no network exfiltration patterns.
Audit Metadata