game-unity-specialist
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external project files.
- Ingestion points: The agent is instructed to orient itself by checking
ProjectSettings,Packages/manifest.json, assembly definitions, and folder structures in the user's project. - Boundary markers: The skill lacks explicit instructions or delimiters to warn the agent against executing instructions that might be embedded within the analyzed project files.
- Capability inventory: The agent has access to powerful tools including
Bash,Write, andEdit, which increases the potential impact if a project file contains malicious instructions that the agent follows. - Sanitization: There is no mention of sanitizing or validating the contents of the ingested files before the agent processes them.
Audit Metadata