ue5-network-viz
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses the
execute_tool_scriptMCP tool to run Python code directly within the Unreal Engine environment. This pattern is employed inactors.pyfor batch rendering,camera.pyfor retrieving engine state, andpanels.pyfor spawning text actors. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including network topology definitions, interface inventories, and PagerDuty incidents.
- Ingestion points: Data is ingested through
TopologyGraphobjects inrenderer.pyand incident lists inincidents.py. - Boundary markers: None detected; data is processed as raw strings for visualization.
- Capability inventory: The skill can spawn/destroy actors, modify materials, and execute scripts in the engine.
- Sanitization: Input data is JSON-serialized but not otherwise validated for malicious instructions before being rendered as 3D text labels.
- [COMMAND_EXECUTION]: The skill interacts with the local environment by making HTTP requests to a UE5 MCP server to manage the 3D scene and its components.
Audit Metadata