unreal-engine-developer

SUSPICIOUS: the skill’s capabilities broadly match Unreal Engine automation, but it relies on third-party MCP servers with unpinned/runtime-installed code and grants very broad editor control, including arbitrary Python execution. No clear credential theft or malicious exfiltration is shown, so this is not confirmed malware; risk is mainly supply-chain trust and high-impact local automation scope.