assets-copy
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of the
unity-mcp-clipackage from the npm registry as a requirement for the skill's operation. - [COMMAND_EXECUTION]: The skill relies on executing shell commands via the
unity-mcp-clitool to interact with the Unity Editor API and perform asset operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes file paths provided as input to copy assets, which presents a surface for indirect prompt injection if an agent is directed to process untrusted data containing malicious paths.
- Ingestion points: Input parameters
sourcePathsanddestinationPathsdefined in the JSON schema withinSKILL.md. - Boundary markers: The skill does not currently define specific boundary markers or instructions to ignore embedded commands within the processed path strings.
- Capability inventory: The tool has the capability to perform file system copy operations and trigger
AssetDatabase.Refresh()within the Unity environment. - Sanitization: No explicit sanitization or path validation logic is described in the prompt instructions to ensure operations remain within the
Assets/directory.
Audit Metadata