unity-package-management
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the Unity Editor binary using
-batchmodeand-executeMethodto perform package operations headlessly. This allows for automated project setup and CI integration as part of its primary functionality. - [EXTERNAL_DOWNLOADS]: The skill performs HTTP requests to the official Unity package registry (https://packages.unity.com) to retrieve package metadata and version information. These downloads target a well-known service and are used for dependency verification.
- [INDIRECT_PROMPT_INJECTION]: The skill generates C# scripts by interpolating package identifiers into code templates, which are then written to the project's Assets folder and executed. This workflow creates an injection surface for malicious package IDs, though it is the intended mechanism for package management.
- Ingestion points: Package names and versions interpolated into PackageInstaller.cs and PackageSearch.cs (SKILL.md).
- Boundary markers: None explicitly defined in the C# templates, though the instructions suggest verifying the list with the user before execution.
- Capability inventory: Writing C# files to the local filesystem and executing the Unity Editor process.
- Sanitization: The skill relies on Unity's internal PackageManager.Client to resolve and validate package requests.
Audit Metadata