unity-development-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/capture_windows_runtime.pyusessubprocess.Popento launch the built game executable for the purpose of capturing runtime screenshots. - Evidence:
subprocess.Popen([str(executable), *args.launch_arg], ... shell=False)inscripts/capture_windows_runtime.py. - Context: This is a standard QA feature for game development; the execution is secured by a robust path resolution utility that restricts targets to
.exefiles within theArtifacts/Buildsdirectory and explicitly validates every path segment to prevent symlink-based escapes from the project root. - [EXTERNAL_DOWNLOADS]: The automation logic specifies dependencies on standard, established Python libraries for data validation and image processing.
- Evidence: Script headers for
scripts/workflow.pyandscripts/capture_windows_runtime.pydefine requirements forjsonschema,PyYAML, andPillow. - [SAFE]: The skill incorporates an extensive internal integrity and validation system across both its C# toolkit and Python orchestration scripts.
- Evidence:
ManifestLoader.cs(C#) andcontracts.py(Python) implement recursive SHA-256 and subject-identity verification for all development 'contracts' (YAML/JSON jobs), ensuring that workflow data has not been tampered with and is correctly bound to the current project version. - Evidence: Path handling logic in
WorkflowPaths.csandresolve_project_pathimplements advanced security checks, including reparse point (symlink/junction) detection, to prevent directory traversal attacks in multi-user development environments.
Audit Metadata