levelplay-unity-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the LevelPlay SDK via the Unity Package Manager and resolve native dependencies using established tools like Mobile Dependency Resolver or External Dependency Manager for Unity (EDM4U). These are official tools and services from Unity and Google.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the developer, such as App Keys and Ad Unit IDs, which are then interpolated into generated C# code snippets (e.g.,
LevelPlayInitializer.cs). - Ingestion points: User inputs for App Key and Ad Unit IDs in
SKILL.md(Steps 5, 7, and 9). - Boundary markers: None identified for user input interpolation into the generated code.
- Capability inventory: The skill generates C# MonoBehaviour scripts for the developer to save to their project. It does not perform automated code execution, network exfiltration of this data, or automated file writes outside of the instruction context.
- Sanitization: User inputs are directly interpolated into string literals within the code blocks without explicit sanitization or validation logic within the prompt templates.
- [COMMAND_EXECUTION]: The README provides a standard installation command using
npxto add the skill from the official Unity-Technologies repository.
Audit Metadata