The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides installation commands that fetch scripts from public-cdn.cloud.unity3d.com and pipe them to a shell (bash or iex). These are official vendor resources from Unity Technologies.
[COMMAND_EXECUTION]: The unity projects exec command allows running arbitrary shell commands across multiple Unity projects.
[DYNAMIC_EXECUTION]: The unity command eval feature allows for the execution of arbitrary C# code within a running Unity Editor instance. The skill also supports running registered Editor commands headlessly via unity run --command.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes project-specific data and external inputs.
Ingestion points: The skill reads project configuration files (ProjectVersion.txt, manifest.json), editor logs (Editor.log), and external data from Jira and Git repositories.
Boundary markers: The documentation notes that terminal output is hardened against control-character and escape-sequence injection from server-provided values.
Capability inventory: The skill has access to the Bash tool and can perform file system operations, network requests, and arbitrary code execution via the Unity Editor.
Sanitization: The skill mentions sanitization and percent-encoding for GitHub Actions workflow commands to prevent injection into CI pipelines.

unity-cli