unity-cli-snippets-audit
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local Python script at a fixed path within the user's home directory ($HOME/.unity-cli-plugin/current/cli/cs.py) to manage the snippet library audit process and perform maintenance tasks.\n- [PROMPT_INJECTION]: The skill processes and validates code snippets located in the project's .unity-cli/snippets~/ directory, which constitutes an attack surface for indirect prompt injection if those files contain malicious instructions or code.\n
- Ingestion points: Snippet markdown files located in the project directory at .unity-cli/snippets~/ and read via the CLI tool.\n
- Boundary markers: Absent; the skill does not instruct the agent to use specific delimiters or ignore instructions when processing these files.\n
- Capability inventory: The CLI tool's revalidation feature executes the snippet bodies to check for API drift and functionality.\n
- Sanitization: No explicit sanitization of snippet content is mentioned before the snippets are passed to the validation gate.
Audit Metadata