assets-prefab-create
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing the
unity-mcp-clipackage via npm to enable its functionality. This is standard setup for this toolset. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
unity-mcp-clitool to interact with the Unity editor. It utilizes shell commands to pass input parameters via JSON strings or files. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect injection as it processes data (GameObject names, hierarchy paths, and asset paths) derived from a Unity project environment which could be influenced by external actors.
- Ingestion points:
gameObjectRefproperties (path,name,assetPath) andprefabAssetPathin SKILL.md. - Boundary markers: None identified in the prompt templates.
- Capability inventory: File system write operations (creating .prefab files in the Assets directory) via
unity-mcp-cli. - Sanitization: No specific sanitization or validation of the input strings is described in the skill documentation.
Audit Metadata