unreal-animation

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script ue_anim.py dynamically resolves and calls methods on the unreal module to ensure compatibility across different versions of Unreal Engine. This dispatch mechanism is restricted to the internal engine API.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests skeletal mesh and animation data from external FBX files, which are processed via the Unreal Engine Interchange and legacy import systems. This ingestion represents a vulnerability surface for maliciously crafted asset data.
  • Ingestion points: External FBX files are processed by import_character and import_animations in ue_anim.py.
  • Boundary markers: None explicitly implemented for FBX metadata parsing.
  • Capability inventory: Script can modify Unreal Engine project configuration files and assets via the unreal API.
  • Sanitization: Bone names and animation curves are filtered using predefined regular expression patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 07:22 AM