optimize-audio
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
unity command evalto execute C# statements within the context of a live Unity Editor. This capability is used to interact with the Unity Editor API for tasks that cannot be performed through simple metadata edits, such as triggering asset re-imports viaSaveAndReimport(). The skill is transparent about this mechanism and includes aSECURITY.mdfile acknowledging this high-privilege access. - [DYNAMIC_EXECUTION]: The skill generates C# code at runtime by populating templates with project-specific data (such as object names or asset paths). These snippets are then passed to the Editor's evaluation engine. This dynamic generation is restricted to the pre-defined 'recipes' provided in the skill's resource files.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Unity project environment, such as asset names, paths, and component properties. This represents an attack surface where maliciously named assets could attempt to influence the agent's behavior. However, the skill primarily uses this data for read-only reporting and structured property modification, which significantly limits the potential for exploitation.
Audit Metadata