optimize-audio
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Unity environment which could contain malicious instructions.
- Ingestion points: The skill reads object names and component properties from the active Unity scene using
UnityEngine.Object.FindObjectsByTypeinresources/audio-import-api.mdand Section 2 ofSKILL.md. - Boundary markers: None identified. The skill does not use specific delimiters or instructions to ignore potential commands embedded in object names.
- Capability inventory: The skill uses
unity command evalto execute C# snippets that can modify project assets, reimport files, and change editor settings (SKILL.mdSection 0 and 4). - Sanitization: No sanitization or validation of scene object names is performed before they are used in string-concatenated C# snippets.
- [DYNAMIC_EXECUTION]: The skill generates and executes C# code at runtime to interact with the Unity Editor API.
- Evidence:
SKILL.mddescribes the execution path usingunity command eval --code '<snippet>'. The snippets are constructed from templates inresources/audio-import-api.mdand executed in the Unity Editor process. - [COMMAND_EXECUTION]: The skill uses the
unity-clitool to execute commands in the local environment. - Evidence:
SKILL.mdspecifies the use ofunity command evalandunity command --format jsonto perform its primary functions.
Audit Metadata