scenario-unity-pipeline-automation
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
github_actions_yamlfunction inscripts/ut_pipeline.pygenerates a GitHub Actions workflow that downloads and executes an installation script frompublic-cdn.cloud.unity3d.com. This is the official installer for the Unity CLI and is considered a safe operation from a well-known service. - [COMMAND_EXECUTION]: The Python runner script (
scripts/ut_pipeline.py) usessubprocess.runto execute external tools including Blender (for FBX generation), Git (to verify repository status and build provenance), and Ruby (for offline YAML syntax validation). These calls are used strictly for project automation tasks. - [DYNAMIC_EXECUTION]: The skill includes an installation routine that copies its C# toolkit from the
scripts/AgentKitdirectory into the target Unity project'sAssets/Editorfolder. These scripts are then compiled and executed within the Unity Editor environment to provide the pipeline functionality.
Audit Metadata