The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes Unity scene metadata which serves as a potential vector for indirect prompt injection. Ingestion points: scene_get_info, scene_get_hierarchy, and scene_find_objects ingest data such as GameObject names and tags from the Unity scene. Boundary markers: No specific delimiters are defined to separate scene data from instructions. Capability inventory: The skill can modify project state via scene_create, scene_load, and scene_save. Sanitization: No evidence of input sanitization for scene-derived strings.
[DATA_EXFILTRATION]: The scene_screenshot skill allows capturing the Game View and returning it as a base64-encoded string via the returnImage parameter. This facilitates the transfer of visual project information to the calling client.

unity-scene