uloop-screenshot

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the uloop screenshot command to capture visual data from the Unity Editor and write PNG files. It supports a --output-directory parameter, which allows saving these files to arbitrary locations on the host system.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Unity environment, which constitutes an attack surface for indirect prompt injection.\n
  • Ingestion points: Visual rendering and UI metadata (names, paths) from the Unity Editor (SKILL.md).\n
  • Boundary markers: None identified in the skill instructions.\n
  • Capability inventory: The skill can write image files to the filesystem and exposes hierarchical project paths and UI interaction hints (SKILL.md, references/annotated-elements.md).\n
  • Sanitization: No validation or sanitization mechanisms for the ingested Unity data are specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:35 PM