unity-verify

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated purpose is coherent for a Unity verification skill, and the visible workflow is limited to local compile/test/runtime checks. The main issue is trust: the skill’s essential functionality is delegated to an unverifiable external `u` binary with no confirmed official provenance in the provided evidence, so overall this is suspicious/high-risk from a supply-chain perspective rather than confirmed malicious.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Mar 22, 2026, 12:25 PM
Package URL
pkg:socket/skills-sh/bigdra50%2Funity-cli%2Funity-verify%2F@32f54410a862d333c1bb73691a37335cba29b8c2