unity-ui-designer
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions facilitate processing of external project data which could be used for indirect prompt injection.\n
- Ingestion points: External files like
art-spec.yamland themcpforunity://project/infostate are used to drive code and UI generation.\n - Boundary markers: There are no instructions to wrap or delimit content from these external sources to prevent them from being interpreted as instructions by the agent.\n
- Capability inventory: The agent is granted capabilities to create and compile C# scripts (
create_script), manage UI assets (manage_ui), and control the Unity editor state (manage_editor).\n - Sanitization: The skill lacks explicit instructions for sanitizing or validating the contents of the
art-spec.yamlfile before processing.\n- [SAFE]: General security analysis of the skill's activities.\n - Script Generation: Generation of Unity C# components (e.g.,
SafeArea.cs) from provided templates is a standard development workflow for this toolset.\n - External References: Links to documentation from trusted or well-known entities (Microsoft, Adobe, Unity, USWDS) are informational and do not involve untrusted code execution or downloads.
Audit Metadata