audio-setup-mixers
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
unity command evalinterface to execute C# code directly within the user's running Unity Editor. This is a high-capability operation necessary for modifying scene data that is not accessible via standard file edits. - [DYNAMIC_EXECUTION]: The agent generates and executes C# statement blocks at runtime. The skill provides specific templates in
references/api.mdand enforces constraints (such as qualifying types and avoidingusingdirectives) to ensure these snippets remain valid and within the scope of the project's Assets directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Unity project, including GameObject names and Audio Clip asset names, which are used to classify sounds and generate routing reports.
- Ingestion points:
UnityEngine.Object.FindObjectsByTypeandUnityEditor.AssetDatabase.FindAssetsare used inreferences/api.mdto collect names from the project scene and assets. - Boundary markers: The skill does not explicitly use boundary markers when processing these names, but treats them as string data within C# dictionaries.
- Capability inventory: The skill has the capability to read project metadata and modify AudioSource components in the active scene via the
evalcommand. - Sanitization: No explicit sanitization of object or asset names is performed. While names are used for classification logic, they are processed as string literals in the provided C# templates.
Audit Metadata