unity-scene-composition

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of C# scripts within the Unity Editor to validate scene composition targets.
  • The snippets in references/scene-measurement.md use standard Unity APIs to calculate renderer bounds and texture texel density relative to the camera frustum.
  • These operations are local, non-persistent, and essential for the skill's primary function of providing objective scene measurements.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through the ingestion of external project configuration files.
  • Ingestion points: Reads art-spec.yaml and registry.yaml from the project's Assets directory as described in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the content of these YAML files.
  • Capability inventory: The agent possesses file system access and the ability to execute C# code and Python scripts (critique_image.py).
  • Sanitization: While equality checks are performed for identifiers like style_id, the instructions do not explicitly mandate sanitization of data before its use in the image critique tool.
  • Assessment: The risk is characterized as low because the data originates from internal project assets and is used for its intended purpose of defining visual constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 11:43 PM