unity-cli-setup

Warn

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the Unity package com.zh1zh1.csharpconsole from an external repository not associated with a trusted vendor or the skill author's known handles.
  • [COMMAND_EXECUTION]: Bootstraps a persistent CLI by copying scripts to $HOME/.unity-cli-plugin/current/ and running them to modify the local Unity project's manifest.json or clone repositories.
  • [REMOTE_CODE_EXECUTION]: Executes a Python script (cs.py) to handle the setup and package installation process, which involves running code from both the plugin root and a hidden directory in the user's home folder.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 03:33 PM