craft-game-floors
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates and executes C# code snippets within the Unity Editor using
unity-cli evalandrun_script. This is used to inspect scene state, apply palette changes, and implement procedural motion or game feel tweens as described in the reference files likereferences/game-feel.mdandreferences/character-motion.md. - [EXTERNAL_DOWNLOADS]: The skill manages project dependencies by installing official Unity packages such as
com.unity.cinemachine,com.unity.probuilder, andcom.unity.shadergraph. It also references and fetches documentation from official domains includingdocs.unity.comanddocs.unity3d.comto ensure instructions match the project's Unity version. - [COMMAND_EXECUTION]: The skill utilizes
unity-clicommands to interact with the Unity Editor, manage project files, and perform visual verification steps. These commands are executed via the shell to facilitate automated testing and asset management. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it reads project configuration files (
ProjectVersion.txt,manifest.json), analyzes project scripts for specific code patterns, and fetches external documentation. These ingestion points are used for routine configuration and styling checks. - [DATA_EXFILTRATION]: The skill interacts with Unity Gaming Services (UGS) for features like Cloud Save and Leaderboards. These operations are performed against official Unity endpoints as part of the intended game functionality.
Audit Metadata