localization

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions in SKILL.md to install the com.unity.localization package using UnityEditor.PackageManager.Client.Add and to import TMP Essential Resources.unitypackage from the local Library/PackageCache. These resources are official Unity packages and their management is performed through standard project workflows.
  • [DYNAMIC_EXECUTION]: The resources/L10nBatchProcessor.cs script utilizes System.Delegate.CreateDelegate to bind the set_text property setter of UI components to localization events. This is a common and legitimate practice in Unity Editor scripting for establishing persistent listeners to properties and does not involve the execution of arbitrary or untrusted code.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves the agent scanning project scenes, prefabs, and source code for text strings to be localized. While this processes external project data, it is the primary intended function of the skill and utilizes logic-based mapping and table population within the local project environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 02:55 PM
Security Audit — agent-trust-hub — localization