unreal-animation
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
ue_anim.pydynamically resolves and calls methods on theunrealmodule to ensure compatibility across different versions of Unreal Engine. This dispatch mechanism is restricted to the internal engine API. - [INDIRECT_PROMPT_INJECTION]: The skill ingests skeletal mesh and animation data from external FBX files, which are processed via the Unreal Engine Interchange and legacy import systems. This ingestion represents a vulnerability surface for maliciously crafted asset data.
- Ingestion points: External FBX files are processed by
import_characterandimport_animationsinue_anim.py. - Boundary markers: None explicitly implemented for FBX metadata parsing.
- Capability inventory: Script can modify Unreal Engine project configuration files and assets via the
unrealAPI. - Sanitization: Bone names and animation curves are filtered using predefined regular expression patterns.
Audit Metadata