optimize-web
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates and executes C# code snippets using a
unity command evaltool. These snippets are used to interact with the Unity Editor API for retrieving and modifying project Player Settings. This behavior is standard for Unity automation and is performed within the user's local development environment. - [COMMAND_EXECUTION]: The skill utilizes a Unity-specific CLI to interact with the project and provides shell command templates for using the
toktxCLI for texture compression (KTX2/Basis Universal). - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by reading external data, such as build reports and project settings files. While this data is processed to inform optimization decisions, there is no evidence of unsafe interpolation that could lead to secondary command injection or safety bypasses.
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of official Unity packages (e.g.,
com.unity.cloud.ktx,com.unity.web.stripping-tool) via the Unity Package Manager. These are recognized as trusted resources from a well-known service provider.
Audit Metadata