unity-debug-profiler
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface through the ingestion of external content.\n
- Ingestion points: The skill reads data from the Unity console via the
read_consoletool and examines project state viaunity_reflectin SKILL.md.\n - Boundary markers: There are no specific instructions or delimiters provided to the agent to treat console log content as untrusted data or to ignore potential instructions embedded within those logs.\n
- Capability inventory: The agent has significant capabilities to modify the environment, including
create_script,script_apply_edits, andapply_text_edits, and can execute code viamanage_editorandexecute_codeas detailed in SKILL.md and references/profiling-guide.md.\n - Sanitization: No sanitization or filtering of the ingested console logs or reflection data is performed before the agent processes it.\n- [COMMAND_EXECUTION]: The skill utilizes tools to execute code directly within the Unity Editor environment.\n
- Execution method: The
execute_codetool is described for performing specialized tasks such as verifying texture compression settings viaTextureImporterin references/profiling-guide.md.
Audit Metadata