unity-cli-command
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates interaction with the Unity Editor by executing a localized Python script path at
$HOME/.unity-cli-plugin/current/cli/cs.py. This is a standard vendor-provided resource for the tool's functionality.\n- [DATA_INGESTION]: The skill ingests Unity project data including scene hierarchies (viascene hierarchy), asset lists (viaasset.list), and component properties (viacomponent.get). While this data ingestion constitutes a surface for indirect instructions if a project contains malicious metadata, no boundary markers or explicit sanitization are defined, though the behavior is intrinsic to the tool's operation.\n- [DYNAMIC_EXECUTION]: The skill supports a fallback mechanism for executing arbitrary C# code (cs exec) when built-in commands are insufficient. This capability is documented as a secondary option to structured commands and is consistent with the tool's intended use for advanced Unity development and automation.
Audit Metadata