unity-bridge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited unity-bridge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Interact with Unity Editor via file-based IPC. Always read params/{tool}.json before calling a tool to get accurate parameters.
bridge.py is located in the same directory as this SKILL.md. Run from the Unity project root:
python3 <skill-dir>/bridge.py <tool-name> '<json-params>'where <skill-dir> is the directory containing this file. Omit JSON when no parameters are needed.
Temp/UnityBridge/heartbeatparams/{tool-name}.json before calling — do not guess parameters from memoryparams/ are auto-generated from C# tool method signaturesScene (7): scene-list-opened list opened scenes · scene-get-data get scene data · scene-open open scene · scene-create create scene · scene-save save scene · scene-set-active set active scene · scene-unload unload scene
GameObject (11): gameobject-find find · gameobject-create create · gameobject-destroy destroy · gameobject-modify modify properties · gameobject-duplicate duplicate · gameobject-set-parent set parent · gameobject-component-add add component · gameobject-component-destroy remove component · gameobject-component-get get component data · gameobject-component-list-all list components · gameobject-component-modify modify component
Assets (11): assets-find search assets · assets-find-built-in search built-in assets · assets-get-data get asset data · assets-modify modify asset · assets-copy copy · assets-move move · assets-delete delete · assets-refresh refresh AssetDatabase · assets-create-folder create folder · assets-material-create create material · assets-shader-list-all list shaders
Prefab (5): assets-prefab-open open for editing · assets-prefab-close close editing · assets-prefab-save save · assets-prefab-create create · assets-prefab-instantiate instantiate
Script (4): script-read read · script-update-or-create create/update · script-delete delete · script-execute execute C# code
Object (2): object-get-data get data · object-modify modify
Editor (4): editor-application-get-state editor state · editor-application-set-state set state · editor-selection-get get selection · editor-selection-set set selection
Reflection (2): reflection-method-find find methods · reflection-method-call call method
Screenshot (1): screenshot-capture capture Game view (Play Mode) or Scene view (Edit Mode) as PNG
Runtime (2): runtime-query query MonoBehaviour fields in Play Mode · runtime-invoke invoke public static methods in Play Mode
Console (1): console-get-logs get logs
Profiler (5): profiler-snapshot performance snapshot · profiler-gc-alloc GC allocations · profiler-hotpath hot paths · profiler-frame-hierarchy frame hierarchy · profiler-stream multi-frame sampling
Package (4): package-list installed packages · package-search search packages · package-add install · package-remove uninstall
LightProbe (5): lightprobe-bake bake · lightprobe-clear clear · lightprobe-analyze analyze lighting · lightprobe-configure-lights configure lights · lightprobe-generate-grid generate grid
Tests (1): tests-run run tests
`script-update-or-create` and `script-delete` trigger Unity recompilation (30-60s). During recompilation the heartbeat expires and subsequent tool calls will be rejected.
Workflow:
script-update-or-create or script-deleteSimilarly, any operation that triggers AssetDatabase.Refresh() with pending script changes may cause recompilation.
For Cursor/Copilot/Windsurf and other MCP clients, see docs/SETUP.md.
params/{tool}.json to verify correct parameter names and types~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.