assets-modify
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing the
unity-mcp-clipackage from the npm registry, which is an external dependency used to execute the skill's primary functions. - [COMMAND_EXECUTION]: The skill relies on executing the
unity-mcp-clitool via the system shell to perform asset modifications within a Unity project environment. - [INDIRECT_PROMPT_INJECTION]: The skill modifies file contents and paths based on external input, creating an attack surface where untrusted data could influence file system operations.
- Ingestion points: The
assetRef.assetPathandcontentfields in the input JSON schema (SKILL.md). - Boundary markers: None. The skill relies on a natural language instruction ("Please modify it in 'Assets/' folder") rather than technical delimiters to restrict the scope of file modifications.
- Capability inventory: The skill has the capability to overwrite file contents and specify paths using the
unity-mcp-clitool. - Sanitization: No explicit sanitization or validation of the provided paths or content is defined within the skill's instructions.
Audit Metadata