shader-graph-create-custom-node
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve searching for and reading existing .hlsl files in the local project directory (SKILL.md, Step 3). This constitutes a potential indirect prompt injection surface as the agent could be influenced by instructions hidden in those files. The risk is mitigated by instructions to show the file contents to the user and seek explicit confirmation before appending code.
- [SAFE]: The skill uses official Unity-related packages and follows standard development practices for the Unity Engine. No unauthorized network activity, credential exposure, or obfuscated commands were identified in the skill instructions or the provided HLSL reference file.
Audit Metadata