scenario-unity-ui
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/ut_ui.pyusessubprocess.runto invoke the macOSsipsutility for image downscaling in thedownscale_for_viewingfunction. Additionally, the skill's core functionality relies onut_run.run_method, which executes Unity in batch mode (-batchmode -executeMethod) to perform UI builds and audits. - [INDIRECT_PROMPT_INJECTION]: The skill implements an extensive audit system (
scripts/AgentKit/UI/UIAudit.cs) that ingests and processes untrusted project data, including Unity scenes, prefabs, UXML templates, and USS stylesheets. This represents an attack surface where malicious instructions could be embedded in game assets to influence the agent's behavior during the audit or build process. The skill attempts to mitigate this through structured auditing and linting of the input files.
Audit Metadata