unity-save-system
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture processes data from external files stored in
Application.persistentDataPath, creating a surface for indirect instruction injection if save files are modified by external actors. - Ingestion points: Data is read from the local file system using
File.ReadAllTextin bothSaveFileIO.LoadJson(SKILL.md) andSaveManager.Load(references/save-load-implementation.md). - Boundary markers: The implementation lacks explicit delimiters or instructions to the agent to treat the loaded JSON content as untrusted data.
- Capability inventory: The skill provides capabilities for file system writes (
File.WriteAllText,File.Delete) and network communication via the Unity Cloud Save service. - Sanitization: The skill mitigates risks by using type-safe DTOs and recommending safe JSON serialization methods, while explicitly warning against the use of
BinaryFormatterto prevent arbitrary code execution.
Audit Metadata