unity-vrc-udon-sharp
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides robust guidance for secure network event handling, specifically advocating for the use of
NetworkCalling.CallingPlayerandNetworkCalling.InNetworkCallto authorize senders instead of trusting network parameters. - [SAFE]: The included validation hooks (
hooks/validate-udonsharp.ps1andhooks/validate-udonsharp.sh) are legitimate developer tools designed to enforce platform-specific compile constraints on generated C# code. - [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting untrusted external data via
VRCStringDownloader. (1) Ingestion points:references/web-loading.md,references/patterns-video.md. (2) Boundary markers: Demonstrated viaUtilities.IsValidand state initialization flags. (3) Capability inventory: Player movement modification, teleportation, and synchronized state mutation. (4) Sanitization: The templates consistently include input bounding, validity checks, and idempotent state projection. - [SAFE]: All external resource usage follows standard VRChat developer patterns. No suspicious network exfiltration or credential harvesting patterns were found.
Audit Metadata