The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection by accepting untrusted strings (names, paths, JSON) that are used to modify Unity scene objects.
Ingestion points: Parameters such as name, materialPath, and path in various skills, and the items JSON array in decal_set_properties_batch.
Boundary markers: Absent; there are no instructions to the agent to treat these inputs as data only or to ignore embedded commands.
Capability inventory: Creation, deletion, and property configuration of Decal Projector GameObjects and Renderer Features.
Sanitization: Not specified in the skill definition.

unity-decal