craft-game-floors

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill generates and executes C# code snippets within the Unity Editor using unity-cli eval and run_script. This is used to inspect scene state, apply palette changes, and implement procedural motion or game feel tweens as described in the reference files like references/game-feel.md and references/character-motion.md.
  • [EXTERNAL_DOWNLOADS]: The skill manages project dependencies by installing official Unity packages such as com.unity.cinemachine, com.unity.probuilder, and com.unity.shadergraph. It also references and fetches documentation from official domains including docs.unity.com and docs.unity3d.com to ensure instructions match the project's Unity version.
  • [COMMAND_EXECUTION]: The skill utilizes unity-cli commands to interact with the Unity Editor, manage project files, and perform visual verification steps. These commands are executed via the shell to facilitate automated testing and asset management.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it reads project configuration files (ProjectVersion.txt, manifest.json), analyzes project scripts for specific code patterns, and fetches external documentation. These ingestion points are used for routine configuration and styling checks.
  • [DATA_EXFILTRATION]: The skill interacts with Unity Gaming Services (UGS) for features like Cloud Save and Leaderboards. These operations are performed against official Unity endpoints as part of the intended game functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 02:28 AM