ui-ugui
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze Unity project data, including prefab hierarchies, scene structures, and existing scripts, to perform targeted edits or generate new content.
- Ingestion points: The agent reads .prefab files, Unity scene data, and existing project hierarchies as specified in the 'Verify before modifying' and 'Workflow' sections.
- Boundary markers: The instructions do not explicitly mandate the use of delimiters or specific 'ignore instructions' warnings when the agent processes data from project files.
- Capability inventory: The skill allows for direct modification of file hierarchies, creation of new assets (prefabs), and generation of C# scripts.
- Sanitization: There are no specific instructions for sanitizing or escaping content read from existing project files before it is used in the agent's reasoning or code generation steps.
- [DYNAMIC_EXECUTION]: The skill involves the generation of executable C# code and the manipulation of the Unity Editor environment. It specifically references the use of
TMP_PackageResourceImporter.ImportResources()to automate the importation of TextMeshPro assets, which is a standard development task but involves programmatic execution of editor-level commands.
Audit Metadata