create-2d-physics
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
unity command evalto execute dynamically generated C# code snippets within the Unity Editor environment. This is used for probing the physics system, configuring component properties, and reading scene data. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local data from the user's project which could potentially contain malicious instructions.
- Ingestion points: Reads project configuration (
Packages/manifest.json), existing project scripts, and scene component data. - Boundary markers: None identified; instructions do not specify delimiters for separating project data from agent instructions.
- Capability inventory: Includes C# execution via
unity command eval, network access viaWebFetch, and various CLI operations throughunity command. - Sanitization: No explicit sanitization or validation of the ingested script content or manifest data is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and worked examples from external sources. These resources originate from Unity Technologies, which is a well-known and trusted vendor for this context.
- Official Documentation: Fetches from
docs.unity.comanddocs.unity3d.com. - GitHub Repository: References examples from
https://github.com/Unity-Technologies/PhysicsExamples2D.
Audit Metadata