stream-unreal
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Stream Chat Unreal plugin from the official GitHub repository (
GetStream/stream-chat-unreal) using the GitHub CLI (gh). This is a standard procedure for installing the necessary SDK components provided by the vendor. - [COMMAND_EXECUTION]: Employs shell commands to discover Unreal Engine project configurations, initialize the Stream CLI (
getstream), and execute Unreal build scripts (Build.sh,RunUAT.sh). These operations are consistent with the skill's purpose as an Unreal Engine development orchestrator. - [INDIRECT_PROMPT_INJECTION]: Analyzes local project files (
.uproject,Build.cs) and fetches remote Markdown documentation from the vendor's domain (getstream.io) to guide code generation. This ingestion surface is managed within the context of the vendor's official technical resources. - Ingestion points: Local Unreal Engine project metadata and remote documentation URLs from
getstream.iofetched via WebFetch. - Boundary markers: The skill provides structural guidance for processing these inputs but does not implement explicit delimiters or instruction-bypass warnings for the external content.
- Capability inventory: Includes shell command execution for project management, plugin installation, and build/run operations on the local machine.
- Sanitization: Relies on the integrity of official project files and vendor-controlled documentation without additional sanitization steps.
Audit Metadata