assets-copy

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation references the installation of the unity-mcp-cli package from the npm registry as a requirement for the skill's operation.
  • [COMMAND_EXECUTION]: The skill relies on executing shell commands via the unity-mcp-cli tool to interact with the Unity Editor API and perform asset operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes file paths provided as input to copy assets, which presents a surface for indirect prompt injection if an agent is directed to process untrusted data containing malicious paths.
  • Ingestion points: Input parameters sourcePaths and destinationPaths defined in the JSON schema within SKILL.md.
  • Boundary markers: The skill does not currently define specific boundary markers or instructions to ignore embedded commands within the processed path strings.
  • Capability inventory: The tool has the capability to perform file system copy operations and trigger AssetDatabase.Refresh() within the Unity environment.
  • Sanitization: No explicit sanitization or path validation logic is described in the prompt instructions to ensure operations remain within the Assets/ directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:32 PM