unity-game-loop
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The provided
GameLoopControllerimplementation uses reflection to instantiate game phases. It resolves type names fromGamePhaseConfigScriptableObject assets at runtime. - Evidence:
Type.GetType(config.phaseTypeName)followed byActivator.CreateInstance(type)inSKILL.mdandreferences/game-loop-scaffolds.md. - Note: This pattern is used to achieve the skill's primary goal of decoupled, designer-friendly architecture.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to translate "Design Intent" (user-provided natural language descriptions) into functional code. This creates a surface where malicious instructions embedded in a game design description could potentially influence the code generation process.
- Ingestion points: User-provided game design descriptions in
SKILL.md(e.g., the "DESIGN INTENT" format). - Capability inventory: Generates C# scripts and Unity components with file-system and runtime execution capabilities within the Unity Editor context.
- Boundary markers: The skill uses a structured format (INTENT/WRONG/RIGHT/SCAFFOLD) to guide the agent, but does not include explicit "ignore embedded instructions" warnings for the data it processes.
- Sanitization: Absent; the skill directly interprets the design intent to structure the generated code architecture.
Audit Metadata