setup-vivox-voice-chat
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a documentation map hosted on Unity's official domain (
docs.unity.com). This is a well-known service and the reference is used for authoritative SDK information. - [INDIRECT_PROMPT_INJECTION]: The skill documents how to receive and process in-game text chat messages (
VivoxMessage). This represents an ingestion point for untrusted data typical of communication services. The instructions focus on UI display and do not suggest unsafe execution or processing of message content. - [CREDENTIALS_UNSAFE]: The skill explicitly instructs developers not to embed Vivox app secrets or HMAC signing keys in client code, recommending server-side token generation instead. This is a security best practice.
Audit Metadata