uloop-screenshot

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates by executing local 'uloop' CLI commands to capture and save screenshots of the Unity Editor.
  • [COMMAND_EXECUTION]: The skill invokes the 'uloop screenshot' command. This is the primary intended function of the skill and does not involve arbitrary command execution or shell injection risks as the parameters are structured.
  • [DATA_EXPOSURE]: The skill saves images to the local filesystem. While it accepts an --output-directory parameter including absolute paths, this is used for the legitimate purpose of storing captured screenshots.
  • [PROMPT_INJECTION]: The skill returns metadata about UI elements (e.g., element names) from the Unity Editor. While this represents a surface for indirect prompt injection if the UI content contains malicious instructions, it is a standard capability for UI automation tools and is considered a low-risk profile under normal operating conditions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 01:04 AM
Security Audit — agent-trust-hub — uloop-screenshot