uloop-screenshot
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
uloop screenshotcommand to capture visual data from the Unity Editor and write PNG files. It supports a--output-directoryparameter, which allows saving these files to arbitrary locations on the host system.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Unity environment, which constitutes an attack surface for indirect prompt injection.\n - Ingestion points: Visual rendering and UI metadata (names, paths) from the Unity Editor (SKILL.md).\n
- Boundary markers: None identified in the skill instructions.\n
- Capability inventory: The skill can write image files to the filesystem and exposes hierarchical project paths and UI interaction hints (SKILL.md, references/annotated-elements.md).\n
- Sanitization: No validation or sanitization mechanisms for the ingested Unity data are specified.
Audit Metadata