unity-explorer-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage the Decentraland development environment, including
npm run startto launch the Explorer,pkillandpgrepfor process management, andclaude mcp addto configure the MCP server within the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data originating from the scene runtime, creating an attack surface for indirect prompt injection.
- Ingestion points: The agent reads scene logs via
get_scene_logs(SKILL.md) and examines ECS entity details usingget_entity_details(reference/interaction.md). - Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore embedded instructions when evaluating these inputs.
- Capability inventory: The agent has permissions to execute shell commands, modify the filesystem (
src/), and change MCP configuration. - Sanitization: No sanitization of log output or entity data is mentioned before it is processed by the agent.
- [DYNAMIC_EXECUTION]: The helper script
scripts/screenshot.shgenerates a Python script at runtime using a heredoc and executes it withpython3. This script is used to decode base64 image data and parse JSON-RPC responses from the local MCP server. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading 3D assets from well-known sources like
kenney.nlanditch.io(reference/assets.md). It also usesnpm installandnpx skills addto fetch vendor-aligned packages and additional skills from thedecentralandorganization.
Audit Metadata