unity-development-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates comprehensive path validation in both its Node.js scripts (scripts/workflow-files.mjs) and C# components (WorkflowPaths.cs) to ensure all file operations are confined within the project root and do not traverse into sensitive system directories.
- [SAFE]: A cryptographic integrity system is used to verify automation jobs (ManifestLoader.cs). It validates SHA-256 hashes of both the JSON payload and the source contract files before execution to prevent tampering.
- [SAFE]: The Unity automation logic includes stability guards (EditorStabilityGuard.cs) that block write operations during unstable states like script compilation or play mode, reducing the risk of project corruption.
- [SAFE]: Image import and processing logic (ImageValidationService.cs) follows defensive principles by enforcing file size limits, validating format signatures (PNG/JPEG), and using a whitelist for target asset directories.
- [SAFE]: No unauthorized network activity, data exfiltration patterns, or attempts to bypass model safety filters were detected; all operations utilize localized scripts and standard Unity CLI interfaces.
Audit Metadata