scenario-unity-expert
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts (
ut_run.py,ut_live.py,ut_env.py) usesubprocess.Popenandsubprocess.runto launch the Unity Editor, the Unity CLI binary, and system utilities likeps(for project lock detection),cp(for APFS project cloning), andxcodebuild. This is the intended mechanism for wrapping Unity's command-line interface. - [DYNAMIC_EXECUTION]: The C#
AgentBridge.cscomponent uses reflection (MethodInfo.Invoke) to execute static methods by name when requested through a file-based inbox in the project'sLibrary/folder. Additionally,ut_live.pyimplements anevalfeature by generating C# source files at runtime, which are then compiled and executed by the Unity Editor. - [EXTERNAL_DOWNLOADS]: The documentation and scripts refer to the official Unity CLI and its installer hosted on
public-cdn.cloud.unity3d.com. These downloads target a well-known service associated with the Unity ecosystem. - [PERSISTENCE]: The
AgentBridge.csclass is marked with[InitializeOnLoad], which ensures that the RPC bridge automatically starts whenever the Unity Editor loads the project. This allows the agent to maintain a connection to a GUI editor session. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Unity log files, NUnit test results (XML), and asset audit facts (JSON). It employs a specific boundary marker (
AGENT_RESULT) to distinguish structured job output from standard engine log noise, reducing the risk of schema confusion.
Audit Metadata