Avoid common Unity mistakes — lifecycle ordering, GetComponent caching, physics timing, and Unity's fake null.
Security Analysis
high confidenceThis is an instruction-only Unity best-practices skill that asks for no installs, files, or credentials and is internally consistent with its stated purpose.
The name/description promise Unity coding guidance and the SKILL.md is purely that: a checklist of Unity lifecycle, performance, physics, serialization, and coroutine tips. It requests no binaries, env vars, or config paths that would be unrelated to providing documentation-like guidance.
The runtime instructions are static prose with actionable advice for Unity developers. They do not instruct the agent to read files, call external endpoints, access environment variables, or perform system operations beyond presenting text—no scope creep detected.
There is no install spec and no code files. As an instruction-only skill, it writes nothing to disk and has a minimal footprint.
The skill requires no environment variables, credentials, or config paths. The lack of requested secrets is proportional to its documentation-style purpose.
always is false and the skill does not ask for persistent permissions or modify other skills/config. Autonomous invocation is allowed by default but, given the skill's instruction-only nature and lack of requested privileges, this does not create a meaningful risk.
Guidance
This skill is essentially a static tipsheet for Unity development and doesn’t request any credentials, installs, or filesystem access—so it’s low-risk and coherent with its description. Before installing, consider: (1) the content has no provenance or links to authoritative sources—treat it as general guidance and verify critical recommendations against Unity docs, (2) if future versions add install steps, downloads, or env-var requirements, re-check those changes before accepting them, and (3) be cautious about following code suggestions verbatim in production projects without review or testing.
Latest Release
v1.0.0
Initial release
More by @ivangdavila
Published by @ivangdavila on ClawHub
