skills/unity-technologies/unity-agent-plugin/validate-urp-render-graph-renderer-feature/Gen Agent Trust Hub
validate-urp-render-graph-renderer-feature
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted Unity C# code provided by users, which creates a potential surface for indirect prompt injection if the source code contains malicious instructions in comments or metadata.
- Ingestion points: The skill accepts 'Unity version', 'URP version', and 'Render Graph renderer feature code' as input for review in SKILL.md.
- Boundary markers: The instructions do not explicitly mandate the use of delimiters or 'ignore embedded instructions' prompts when the AI processes the external code.
- Capability inventory: The skill definition itself does not request any tool permissions (e.g., shell access, network, or file writes) and relies purely on the LLM's reasoning capabilities.
- Sanitization: No explicit sanitization or filtering of the input code is described in the workflow.
Audit Metadata