ue5-character
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for importing external FBX assets into Unreal Engine, which represents a potential attack surface.
- Ingestion points: FBX files located at user-defined paths (e.g.,
characters/hero.fbx) as seen inSKILL.md. - Capability inventory: The skill utilizes the
unrealPython API to import assets, modify skeletal meshes, and configure animation blueprints. - Boundary markers: None present.
- Sanitization: No explicit sanitization of FBX metadata or hierarchy is mentioned; the skill relies on standard engine import settings.
- [DATA_EXPOSURE]: The documentation includes a placeholder for a network request to an internal studio bridge server.
- Evidence:
POST http://<YOUR_BRIDGE_HOST>:<PORT>/ue5/importinSKILL.md. - This is documented as a placeholder for studio-specific infrastructure and does not target external or untrusted domains.
Audit Metadata