ue5-character

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for importing external FBX assets into Unreal Engine, which represents a potential attack surface.
  • Ingestion points: FBX files located at user-defined paths (e.g., characters/hero.fbx) as seen in SKILL.md.
  • Capability inventory: The skill utilizes the unreal Python API to import assets, modify skeletal meshes, and configure animation blueprints.
  • Boundary markers: None present.
  • Sanitization: No explicit sanitization of FBX metadata or hierarchy is mentioned; the skill relies on standard engine import settings.
  • [DATA_EXPOSURE]: The documentation includes a placeholder for a network request to an internal studio bridge server.
  • Evidence: POST http://<YOUR_BRIDGE_HOST>:<PORT>/ue5/import in SKILL.md.
  • This is documented as a placeholder for studio-specific infrastructure and does not target external or untrusted domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 04:22 AM