assets-create-folder
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
unity-mcp-clicommand-line tool to execute folder creation logic within the Unity environment. The command structure facilitates direct interaction with the Unity Editor's asset database. - [EXTERNAL_DOWNLOADS]: The documentation instructs users to install the
unity-mcp-clipackage via NPM (Node Package Manager). This is a functional requirement to provide the execution environment for the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests folder paths and names as input, which represents a potential attack surface for indirect injection if these paths are generated from untrusted external data.
- Ingestion points: The
inputsarray inSKILL.mdwhich acceptsParentFolderPathandNewFolderNamestrings. - Boundary markers: None identified in the skill instructions to separate data from commands.
- Capability inventory: The skill has the capability to modify the file system by creating new directories within the project structure via shell commands.
- Sanitization: No explicit sanitization or validation of the input paths is defined within the skill markdown.
Audit Metadata