unity-cli
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Unity CLI installation scripts from official content delivery networks (public-cdn.cloud.unity3d.com) and project configuration templates from GitHub repositories.\n- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute installation scripts directly via shell interpreters (bash and powershell). These operations target official Unity Technologies infrastructure and are required for tool setup.\n- [COMMAND_EXECUTION]: Uses the Bash tool to run Unity CLI operations. This includes functionality for evaluating arbitrary C# code within a running Unity Editor (via
unity command eval), which is a primary feature intended for automated scene and asset modification.\n- [PROMPT_INJECTION]: Ingests data from connected Unity Editors (e.g., viaunity listorunity command), creating a surface for indirect prompt injection. The skill documentation highlights that terminal output is hardened against control-character and escape-sequence injection to mitigate this attack vector.
Audit Metadata