assets-prefab-create

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing the unity-mcp-cli package via npm to enable its functionality. This is standard setup for this toolset.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the unity-mcp-cli tool to interact with the Unity editor. It utilizes shell commands to pass input parameters via JSON strings or files.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect injection as it processes data (GameObject names, hierarchy paths, and asset paths) derived from a Unity project environment which could be influenced by external actors.
  • Ingestion points: gameObjectRef properties (path, name, assetPath) and prefabAssetPath in SKILL.md.
  • Boundary markers: None identified in the prompt templates.
  • Capability inventory: File system write operations (creating .prefab files in the Assets directory) via unity-mcp-cli.
  • Sanitization: No specific sanitization or validation of the input strings is described in the skill documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:32 PM