initialize-ai-navigation

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Instructions in SKILL.md guide the agent to modify the Packages/manifest.json file to install the com.unity.ai.navigation package, which is a standard procedure for managing dependencies in the Unity Editor.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Unity package registry at https://packages.unity.com/com.unity.ai.navigation to verify and install navigation components.
  • [DYNAMIC_EXECUTION]: The skill documents the use of an eval tool to compile and execute C# statement blocks within the Unity Editor environment. This is used for querying the live scene for components like NavMeshSurface and NavMeshAgent, and for implementing runtime navigation behaviors from provided recipes.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where it ingests external data to influence its operations.
  • Ingestion points: Scene inspection results (Step 1) and user-supplied navigation requirements.
  • Boundary markers: None identified; the skill does not use specific delimiters to separate user input or scene data from its execution logic.
  • Capability inventory: The skill possesses the ability to execute C# code via eval and write new script files to the project directory.
  • Sanitization: There is no evidence of sanitization or validation performed on the data retrieved from the scene or provided by the user before it is used to generate or execute code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 10:37 AM