unity-scene-composition
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of C# scripts within the Unity Editor to validate scene composition targets.
- The snippets in
references/scene-measurement.mduse standard Unity APIs to calculate renderer bounds and texture texel density relative to the camera frustum. - These operations are local, non-persistent, and essential for the skill's primary function of providing objective scene measurements.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through the ingestion of external project configuration files.
- Ingestion points: Reads
art-spec.yamlandregistry.yamlfrom the project'sAssetsdirectory as described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the content of these YAML files.
- Capability inventory: The agent possesses file system access and the ability to execute C# code and Python scripts (
critique_image.py). - Sanitization: While equality checks are performed for identifiers like
style_id, the instructions do not explicitly mandate sanitization of data before its use in the image critique tool. - Assessment: The risk is characterized as low because the data originates from internal project assets and is used for its intended purpose of defining visual constraints.
Audit Metadata