tilemap-palette-create
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided parameters such as palette names and layout configurations, which creates a potential surface for indirect prompt injection if malicious data is provided.
- Ingestion points: User-specified parameters defined in Step 1 of
SKILL.md(e.g., 'Palette Name', 'Grid Type'). - Boundary markers: The skill does not implement specific delimiters or instructions for the agent to ignore potentially malicious instructions embedded in the user-provided text.
- Capability inventory: The skill utilizes the
UnityEditor.Tilemaps.GridPaletteUtility.CreateNewPaletteAPI as shown inscripts/CreatePaletteTemplate.csto create new GameObject assets within the project file system. - Sanitization: There is no evidence of input validation or sanitization for the strings provided by the user before they are passed to the Unity Editor API.
Audit Metadata