The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill interacts with external Unity project data such as renderer feature names and URP asset configurations, which serves as an ingestion point for potentially untrusted content. However, the instructions include specific guardrails requiring the agent to validate names against system-provided lists (e.g., creatableRendererFeatures) before performing mutations, which mitigates the risk of processing malicious project metadata.
[COMMAND_EXECUTION]: The module defines tools for modifying rendering settings and project features. These operations are scoped to Unity project management and do not include patterns for arbitrary shell execution, sensitive file access, or unauthorized network operations.

unity-urp