scenario-unity-ui

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/ut_ui.py uses subprocess.run to invoke the macOS sips utility for image downscaling in the downscale_for_viewing function. Additionally, the skill's core functionality relies on ut_run.run_method, which executes Unity in batch mode (-batchmode -executeMethod) to perform UI builds and audits.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements an extensive audit system (scripts/AgentKit/UI/UIAudit.cs) that ingests and processes untrusted project data, including Unity scenes, prefabs, UXML templates, and USS stylesheets. This represents an attack surface where malicious instructions could be embedded in game assets to influence the agent's behavior during the audit or build process. The skill attempts to mitigate this through structured auditing and linting of the input files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 07:17 AM