{"data":{"skill":{"slug":"wshobson-unity-ecs-patterns","name":"unity-ecs-patterns","icon":"📦","repo":"https://github.com/wshobson/agents/tree/main/plugins/game-development/skills/unity-ecs-patterns","status":"approved","author":"wshobson","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"d91be83c-d735-4650-8d02-73a758f4525c","skill_id":"4f666adc-5e20-4392-86b7-27d77afbb30c","version":6,"content_hash":"aa0205fad5a465cc19bcda1ed680b3ce","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis flagged markdown code fences, Unity API terms, and reference links. Manual review found no executable shell commands, prompt injection, credential access, data exfiltration, or malicious intent. The remaining network indicator is limited to documentation and sample repository URLs.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"SKILL.md","line_end":624,"line_start":624},{"file":"SKILL.md","line_end":625,"line_start":625},{"file":"SKILL.md","line_end":626,"line_start":626}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"False Positive: Markdown Code Fences Flagged as Shell Execution","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":87,"line_start":87},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":152,"line_start":152},{"file":"SKILL.md","line_end":156,"line_start":156},{"file":"SKILL.md","line_end":200,"line_start":200},{"file":"SKILL.md","line_end":204,"line_start":204},{"file":"SKILL.md","line_end":255,"line_start":255},{"file":"SKILL.md","line_end":259,"line_start":259},{"file":"SKILL.md","line_end":337,"line_start":337},{"file":"SKILL.md","line_end":341,"line_start":341},{"file":"SKILL.md","line_end":399,"line_start":399},{"file":"SKILL.md","line_end":403,"line_start":403},{"file":"SKILL.md","line_end":472,"line_start":472},{"file":"SKILL.md","line_end":476,"line_start":476},{"file":"SKILL.md","line_end":565,"line_start":565},{"file":"SKILL.md","line_end":569,"line_start":569}],"confidence":0.98,"description":"The reported external command locations are markdown code fences around Unity C# examples. They do not execute commands or invoke a shell.","confidence_reasoning":"The flagged locations are visible markdown fences or C# code sample boundaries. No shell interpreter, process launch API, or command string is present at those lines."},{"title":"False Positive: Unity ECS Terms Flagged as Blocker Patterns","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":102,"line_start":102},{"file":"SKILL.md","line_end":109,"line_start":109},{"file":"SKILL.md","line_end":123,"line_start":123},{"file":"SKILL.md","line_end":131,"line_start":131},{"file":"SKILL.md","line_end":147,"line_start":147},{"file":"SKILL.md","line_end":162,"line_start":162},{"file":"SKILL.md","line_end":173,"line_start":173},{"file":"SKILL.md","line_end":183,"line_start":183},{"file":"SKILL.md","line_end":186,"line_start":186},{"file":"SKILL.md","line_end":205,"line_start":205},{"file":"SKILL.md","line_end":211,"line_start":211},{"file":"SKILL.md","line_end":249,"line_start":249},{"file":"SKILL.md","line_end":293,"line_start":293},{"file":"SKILL.md","line_end":306,"line_start":306},{"file":"SKILL.md","line_end":311,"line_start":311},{"file":"SKILL.md","line_end":322,"line_start":322},{"file":"SKILL.md","line_end":360,"line_start":360},{"file":"SKILL.md","line_end":383,"line_start":383},{"file":"SKILL.md","line_end":416,"line_start":416},{"file":"SKILL.md","line_end":447,"line_start":447},{"file":"SKILL.md","line_end":493,"line_start":493},{"file":"SKILL.md","line_end":514,"line_start":514},{"file":"SKILL.md","line_end":519,"line_start":519},{"file":"SKILL.md","line_end":525,"line_start":525},{"file":"SKILL.md","line_end":578,"line_start":578},{"file":"SKILL.md","line_end":590,"line_start":590},{"file":"SKILL.md","line_end":601,"line_start":601}],"confidence":0.95,"description":"The weak cryptography and system reconnaissance alerts map to Unity ECS words such as Entity, System, OnCreate, and DestroyEntity in instructional C# examples.","confidence_reasoning":"The surrounding context is Unity ECS tutorial code, not cryptographic or reconnaissance behavior. No evidence found of host inspection, weak crypto calls, or malware-like intent."},{"title":"Documentation URLs Present","verdict":"FALSE_POSITIVE","locations":[{"file":"SKILL.md","line_end":624,"line_start":624},{"file":"SKILL.md","line_end":625,"line_start":625},{"file":"SKILL.md","line_end":626,"line_start":626}],"confidence":0.96,"description":"The file includes hardcoded links to Unity documentation, Unity ECS samples, and the Burst guide. These are references, not active network requests.","confidence_reasoning":"The URLs appear only in a Resources section. There is no code that fetches those URLs, sends data, or directs the agent to contact external services."}],"dangerous_patterns":[],"files_scanned":1,"total_lines":627,"audit_model":"codex","audited_at":"2026-07-01T01:04:51.836+00:00","created_at":"2026-07-01T02:22:14.360749+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":3,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}